Access permissions for files through qm_popup_streamAudio.do

[gb_delti]

Hi,

I'd like to make specific audio recordings available to a user, but don't want him to have any other permissions. I have created the class "AUDIOLISTENER" and gave it the permissions "USER CALLMONITOR MON_AUDIO". The user can log in, but when I copy the URL to the audio file (qm_popup_streamAudio.do with the name of the file) from the info dialog window and copy it into the other browser where my "audio user" is logged in I get the error message "Illegal file access: the file is not in the list of allowed files."

How can I set the list of allowed files for the user?

[QueueMetrics]

You need to have searched for the file, cannot just "jump in". This is a security measure to avoid hijacking.

[davilox]

Hi all,

I'm accesing audio files from rest interface.

I have a user with needed keys (CALLMONITOR etc) and the MasterKey.

I have used "queuemetrics/QmFindAudio/jsonStatsApi.do?id=XXXXXXXXXX"  to find audio files and put their names and paths into string array to show them to the user, and when the user clicks on a file shown on a listview, then I use "queuemetrics/QmFindAudio/qm_popup_streamAudio.do?/var/spool/asterisk/monitor/XXXXXXXXX" to retrieve audio stream.

I'm receiving the error:
Illegal file access: the file is not in the list of allowed files.


I've used "/queuemetrics/qm_show_files.do" and the system shows me the following:

User has the CALLMONITOR key? true
Search path: /var/spool/asterisk/monitor/

.gsm files


.wav files

/var/spool/asterisk/monitor/q1000-20160609-012039-1465428039.244.wav
/var/spool/asterisk/monitor/q1000-20160609-050926-1465441766.284.wav
/var/spool/asterisk/monitor/q1000-20160609-050943-1465441783.286.wav
/var/spool/asterisk/monitor/q1000-20160609-050953-1465441793.288.wav
/var/spool/asterisk/monitor/q1000-20160609-013331-1465428811.254.wav
/var/spool/asterisk/monitor/qmfile.wav

.WAV files

What I'm doing wrong?