<div>True - but you'll still need to integrate to MLA for your 'allowed' users of soap/axl.....</div> <div> </div> <div>Charles<BR><BR><B><I>Dietmar <db7td@gmx.de></I></B> wrote:</div> <BLOCKQUOTE class=replbq style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #1010ff 2px solid">Solution:<BR><BR>This is a known bug (CSCsc59620) that has been fixed in 4.2(1). Setting the <BR>system parameter "Enable AXL Access Levels" to TRUE denies unauthorized <BR>access to AXL. The default is, for whatever reason, FALSE!<BR><BR><BR>Dietmar<BR><BR><BR><BR>On Wednesday 10 October 2007 03:22:13 Charles Ragan, Jr. wrote:<BR>> Nope - it's true. With 4.2 and later you can restrict using MLA.<BR>><BR>> With previous versions of CM, we chose to restrict what ip address space<BR>> could access the soap/axl interface within IIS.<BR>><BR>> Charles<BR>><BR>> Dietmar <DB7TD@GMX.DE>wrote:<BR>> Hi all,<BR>><BR>> while playing a little with the
AXL/SOAP interface of CCM 4.2, I realized<BR>> that every authenticated user is able to read and modify (!) ALL settings,<BR>> even these of phones/lines that are not assigned to that user.<BR>><BR>> I would have expected that a user can only modify his own settings with the<BR>> AXL/SOAP interface. Hopefully, this is true and someone has an idea what is<BR>> wrong with my CCM settings ;-). Any hints?<BR>><BR>><BR>> Thanks,<BR>> Dietmar<BR>> _______________________________________________<BR>> cisco-voip mailing list<BR>> cisco-voip@puck.nether.net<BR>> https://puck.nether.net/mailman/listinfo/cisco-voip<BR>><BR>><BR>><BR>> Charles Ragan Jr., Technology Consultant<BR>> Principal Consultant - CCIE #1764<BR>> Cell Phone - 336-442-4361<BR>> http://www.geocities.com/ciscojock2002/<BR><BR>_______________________________________________<BR>cisco-voip mailing
list<BR>cisco-voip@puck.nether.net<BR>https://puck.nether.net/mailman/listinfo/cisco-voip<BR></BLOCKQUOTE><BR><BR><BR>Charles Ragan Jr., Technology Consultant<br>Principal Consultant - CCIE #1764<br>Cell Phone - 336-442-4361<br>http://www.geocities.com/ciscojock2002/