[asterisk-dev] voicemail: storing vmsecret in /var/spool/asterisk/voicemail

[Klaus Darilion]

Hi!

I do not like that the vmsecret is stored in the same file file as the 
other user provisioning and Asterisk writes to this file (users.conf or 
voicemail.conf). (so, indirectly a user can write to the configuration 
file).

What do you think about the idea of storing the vmsecret in the spool 
directory - just like all the other user configuration (self recorded 
prompts ...). Then we have a clear separation - all the things 
configured by the admin are in the configuration file (user.conf or 
voicemail.conf) and all the things configured by the user itself are in 
the spool directory.

regards
Klaus