[asterisk-users] Removing mailbox and password prompt for voicemail

[D'Arcy J.M. Cain]

On Mon, 1 Aug 2016 09:08:36 +0100
Nabeel <nabeelshikder at gmail.com> wrote:
> I am using ODBC realtime storage with Asterisk. Currently, with no
> password set, a user can dial the voicemail number to retrieve their

From their own phone or from any phone?

> I am yet to test this behaviour in Asterisk during the
> Unavailable/Busy message. However, if this is the case, then this
> seems to be an illogical security hole in Asterisk's design. Why does
> Asterisk allow accessing another person's mailbox by pressing the '*'
> key, while listening to *the other person's* unavailable message?

It's not for accessing another person's mailbox.  It's for accessing
your own when you are away from home/office.

-- 
D'Arcy J.M. Cain
System Administrator, Vex.Net
http://www.Vex.Net/ IM:darcy at Vex.Net
VoIP: sip:darcy at Vex.Net