Author Topic: Access permissions for files through qm_popup_streamAudio.do  (Read 2899 times)

gb_delti

  • Newbie
  • *
  • Posts: 22
  • Karma: 0
    • View Profile
Access permissions for files through qm_popup_streamAudio.do
« on: November 08, 2011, 15:24:13 »
Hi,

I'd like to make specific audio recordings available to a user, but don't want him to have any other permissions. I have created the class "AUDIOLISTENER" and gave it the permissions "USER CALLMONITOR MON_AUDIO". The user can log in, but when I copy the URL to the audio file (qm_popup_streamAudio.do with the name of the file) from the info dialog window and copy it into the other browser where my "audio user" is logged in I get the error message "Illegal file access: the file is not in the list of allowed files."

How can I set the list of allowed files for the user?

QueueMetrics

  • Loway
  • Hero Member
  • *
  • Posts: 2999
  • Karma: 39
    • View Profile
    • QueueMetrics
Re: Access permissions for files through qm_popup_streamAudio.do
« Reply #1 on: January 18, 2012, 18:14:05 »
You need to have searched for the file, cannot just "jump in". This is a security measure to avoid hijacking.

davilox

  • Newbie
  • *
  • Posts: 2
  • Karma: 0
    • View Profile
    • Email
Re: Access permissions for files through qm_popup_streamAudio.do
« Reply #2 on: June 13, 2016, 13:21:38 »
Hi all,

I'm accesing audio files from rest interface.

I have a user with needed keys (CALLMONITOR etc) and the MasterKey.

I have used "queuemetrics/QmFindAudio/jsonStatsApi.do?id=XXXXXXXXXX"  to find audio files and put their names and paths into string array to show them to the user, and when the user clicks on a file shown on a listview, then I use "queuemetrics/QmFindAudio/qm_popup_streamAudio.do?/var/spool/asterisk/monitor/XXXXXXXXX" to retrieve audio stream.

I'm receiving the error:
Illegal file access: the file is not in the list of allowed files.


I've used "/queuemetrics/qm_show_files.do" and the system shows me the following:

User has the CALLMONITOR key? true
Search path: /var/spool/asterisk/monitor/

.gsm files


.wav files

/var/spool/asterisk/monitor/q1000-20160609-012039-1465428039.244.wav
/var/spool/asterisk/monitor/q1000-20160609-050926-1465441766.284.wav
/var/spool/asterisk/monitor/q1000-20160609-050943-1465441783.286.wav
/var/spool/asterisk/monitor/q1000-20160609-050953-1465441793.288.wav
/var/spool/asterisk/monitor/q1000-20160609-013331-1465428811.254.wav
/var/spool/asterisk/monitor/qmfile.wav

.WAV files

What I'm doing wrong?