[asterisk-bugs] [JIRA] Feedback Entered: (ASTERISK-20397) "all" permission shows in "manager show user"-command, but the user hasn't this permission.

[Johan Wilfer (JIRA)]

     [ https://issues.asterisk.org/jira/browse/ASTERISK-20397?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Johan Wilfer updated ASTERISK-20397:
------------------------------------

    Status: Waiting for Feedback  (was: Waiting for Feedback)

manager.conf
{noformat}
[general]
enabled = yes
port = 5038
bindaddr = 127.0.0.1

[pbx_ami]
secret = ***
deny=0.0.0.0/0.0.0.0
permit = 127.0.0.1/255.255.255.255
write=originate,callwrite=all

read=
{noformat}

If I remove the write-line, and restart asterisk (sidenote: reload will not remove the previous write permission, but restart will):
{noformat}
pbx1*CLI> manager show user pbx_ami

       username: pbx_ami
         secret: <Set>
            acl: yes
      read perm: <none>
     write perm: <none>
displayconnects: yes
{noformat}

If I alter the write-line to "write=all", and reload:
{noformat}
pbx1*CLI> manager show user pbx_ami

       username: pbx_ami
         secret: <Set>
            acl: yes
      read perm: <none>
     write perm: system,call,log,verbose,command,agent,user,config,dtmf,reporting,cdr,dialplan,originate,agi,cc,aoc,test,all
displayconnects: yes
{noformat}

> "all" permission shows in "manager show user"-command, but the user hasn't this permission.
> -------------------------------------------------------------------------------------------
>
>                 Key: ASTERISK-20397
>                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-20397
>             Project: Asterisk
>          Issue Type: Bug
>      Security Level: None
>          Components: Core/ManagerInterface
>    Affects Versions: 1.8.15.1
>            Reporter: Johan Wilfer
>            Assignee: Johan Wilfer
>            Severity: Minor
>
> If I put this in my manager.conf:
> {noformat}
> [pbx_ami]
> secret = ***
> deny=0.0.0.0/0.0.0.0
> permit = x.x.x.x/255.255.255.255
> write=originate,call
> read=
> {noformat}
> I get this ("manager show user pbx_ami"):
> {noformat}
>       username: pbx_ami
>         secret: <Set>
>            acl: yes
>      read perm: <none>
>     write perm: call,originate,all
> displayconnects: yes
> {noformat}
> Notice the "all"-permission in the output, but not present in the config.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira