vicidial.org

Hi,

I would like to know why doesn't vicidial enforce the same user permissions when the file is uploaded to the ftp server.

Can there be a web script on vicidial server that can download the file directly from the ftp again without the user knowing the password to the ftp server itself with the link enforcing the recording listening permissions for the user.

Thanks

Take a look of /srv/www/htdocs/vicidial/recording_lookup.php

Admin->System Settings: "Log Recording Access"

The user is never given a link to the recordings. The agent's web browser gets the audio file from a Vicidial script redirect.

Since they can not see the recordings in the web interface, and if you lock down the recordings folder so only "localhost" (and perhaps your IP?) can access the recordings folder, the user will only get recordings they are authorized to view.

Plus, you'll get a log of all recordings accessed.