<p dir="ltr">So if no jsonrpc-allowed-jsapi and -fsapi in user config, user cannot send jsapi/fsapi via verto, and only can behave like standard sip user?</p>
<p dir="ltr">Donny</p>
<div class="gmail_extra"><br><div class="gmail_quote">Pada tanggal 1 Nov 2016 2:14 AM, &quot;Michael Jerris&quot; &lt;<a href="mailto:mike@jerris.com">mike@jerris.com</a>&gt; menulis:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word">you can secure it on a user by user basis, but limited only to which commands that user can run  the attrs are:<div><br></div><div>jsonrpc-allowed-jsapi</div><div>jsonrpc-allowed-fsapi</div><div><br></div><div>for fsapi commands and jsapi commands.</div><div><br></div><div>if you look in the default configs you can see similar settings put in at a global level, the same is possible per user:</div><div><br></div><div><div style="margin:0px;font-size:13px;line-height:normal;font-family:Monaco;color:rgb(245,245,245);background-color:rgb(0,0,0)"><span style="font-variant-ligatures:no-common-ligatures">conf/testing/directory/<wbr>default.xml</span><span style="font-variant-ligatures:no-common-ligatures;color:#34bbc7">:</span><span style="font-variant-ligatures:no-common-ligatures">5</span><span style="font-variant-ligatures:no-common-ligatures;color:#34bbc7">:</span><span style="font-variant-ligatures:no-common-ligatures">    &lt;param name=&quot;</span><span style="font-variant-ligatures:no-common-ligatures;color:#c33720">jsonrpc-allowed</span><span style="font-variant-ligatures:no-common-ligatures">-methods&quot; value=&quot;verto&quot;/&gt;</span></div><div style="margin:0px;font-size:13px;line-height:normal;font-family:Monaco;color:rgb(245,245,245);background-color:rgb(0,0,0)"><span style="font-variant-ligatures:no-common-ligatures">conf/vanilla/directory/<wbr>default.xml</span><span style="font-variant-ligatures:no-common-ligatures;color:#34bbc7">:</span><span style="font-variant-ligatures:no-common-ligatures">26</span><span style="font-variant-ligatures:no-common-ligatures;color:#34bbc7">:</span><span style="font-variant-ligatures:no-common-ligatures">      &lt;param name=&quot;</span><span style="font-variant-ligatures:no-common-ligatures;color:#c33720">jsonrpc-allowed</span><span style="font-variant-ligatures:no-common-ligatures">-methods&quot; value=&quot;verto&quot;/&gt;</span></div><div style="margin:0px;font-size:13px;line-height:normal;font-family:Monaco;color:rgb(245,245,245);background-color:rgb(0,0,0)"><span style="font-variant-ligatures:no-common-ligatures">conf/vanilla/directory/<wbr>default.xml</span><span style="font-variant-ligatures:no-common-ligatures;color:#34bbc7">:</span><span style="font-variant-ligatures:no-common-ligatures">27</span><span style="font-variant-ligatures:no-common-ligatures;color:#34bbc7">:</span><span style="font-variant-ligatures:no-common-ligatures">      &lt;!-- &lt;param name=&quot;</span><span style="font-variant-ligatures:no-common-ligatures;color:#c33720">jsonrpc-allowed</span><span style="font-variant-ligatures:no-common-ligatures">-event-<wbr>channels&quot; value=&quot;demo,conference,<wbr>presence&quot;/&gt; --&gt;</span></div></div><div><span style="font-variant-ligatures:no-common-ligatures"><br></span></div><div><span style="font-variant-ligatures:no-common-ligatures"><br></span></div><div><br><div><blockquote type="cite"><div>On Oct 31, 2016, at 3:00 AM, Donny Hardyanto &lt;<a href="mailto:hardyanto.donny@gmail.com" target="_blank">hardyanto.donny@gmail.com</a>&gt; wrote:</div><br class="m_-7150223739952815331Apple-interchange-newline"><div><div dir="ltr">Hi all,<div><br></div><div>Is it possible to run JSAPI via verto? Is it as powerfull as Event Socket? Is there any way to secure it? I like to deploy the verto webrtc to website, but dont want any one can abuse and control my FS box via JSAPi/verto.</div><div><br></div><div>Thanks,</div><div><br></div><div>Donny</div></div>
______________________________<wbr>______________________________<wbr>_____________<br>Professional FreeSWITCH Consulting Services: <br><a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br><a href="http://www.freeswitchsolutions.com" target="_blank">http://www.<wbr>freeswitchsolutions.com</a><br><br>Official FreeSWITCH Sites<br><a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br><a href="http://confluence.freeswitch.org" target="_blank">http://confluence.freeswitch.<wbr>org</a><br><a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br><br>FreeSWITCH-users mailing list<br><a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.<wbr>freeswitch.org</a><br><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/<wbr>mailman/listinfo/freeswitch-<wbr>users</a><br>UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.<wbr>freeswitch.org/mailman/<wbr>options/freeswitch-users</a><br><a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a></div></blockquote></div><br></div></div><br>______________________________<wbr>______________________________<wbr>_____________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" target="_blank">http://www.<wbr>freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" rel="noreferrer" target="_blank">http://confluence.freeswitch.<wbr>org</a><br>
<a href="http://www.cluecon.com" rel="noreferrer" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.<wbr>freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" target="_blank">http://lists.freeswitch.org/<wbr>mailman/listinfo/freeswitch-<wbr>users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" target="_blank">http://lists.<wbr>freeswitch.org/mailman/<wbr>options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" rel="noreferrer" target="_blank">http://www.freeswitch.org</a><br></blockquote></div></div>