[asterisk-users] Asterisk SIP Microsoft Outlook Integration

[Tzafrir Cohen]

On Wed, Dec 05, 2007 at 06:05:45PM -0500, Michael Melia Jr. wrote:
> Thanks for the suggestions so far.  I don't like the idea that I have to
> give full control with OutCall but it seems to be the case with most of
> the solutions out there.  

I suggested http://bugs.digium.com/10972 which is a very good start to
solving those issues. Or at least reduce the threat. But I guess people 
prefer to just ignore the problem.

It does not deal with the ability of the caller to use an arbitrary
originating device. This may allow the (not fully untrusted) to use any
SIP/IAX trunk with any extension in the target context.

But it still prevents the option to running an arbitrary dialplan command, 
and such. Maybe someone else would have a better idea about setting a
device for the caller. Maybe figure out a way to find a set of devices
to a that user.

And it actually does not break the existing manager interface. So you
should probably be able to use your OutCall. Unless it uses the manager
interface to do things other than originating cals. In that case - you
need to think better about the required permissions in manager.conf .

-- 
               Tzafrir Cohen
icq#16849755              jabber:tzafrir.cohen at xorcom.com
+972-50-7952406           mailto:tzafrir.cohen at xorcom.com
http://www.xorcom.com  iax:guest at local.xorcom.com/tzafrir