AMI Permissions, “all” Means Different Things?

Home » Asterisk Users » AMI Permissions, “all” Means Different Things?
Asterisk Users 3 Comments

Hi!

I’m trying to limit the permissions for a AMI-account. But I’m a little bit confused by the permissions. The commands I use are (output from
“manager show commands”, btw: privilege col seems cropped?):

Action Privilege Synopsis
Redirect call,all Redirect (transfer) a call.
Originate originate,all Originate a call.
Getvar call,reporting, Gets a channel variable.

If I put this in my manager.conf:

[pbx_ami]
secret = ***
deny=0.0.0.0/0.0.0.0
permit = x.x.x.x/255.255.255.255
write=originate,call read

I get this (“manager show user pbx_ami”):

username: pbx_ami
secret:
acl: yes
read perm:
write perm: call,originate,all displayconnects: yes

Where does the “all” permission come from? However, If I change the row in manager.conf to “write=originate,call,all” the output is:

username: pbx_ami
secret:
acl: yes
read perm:
write perm:
system,call,log,verbose,command,agent,user,config,dtmf,reporting,cdr,dialplan,originate,agi,cc,aoc,test,all displayconnects: yes

Can someone explain this please?

Thanks!

3 thoughts on - AMI Permissions, “all” Means Different Things?