I think the proper way of doing that is by assigning users to different dialplan user contexts according to their Class of Service.

For example, an easy way of doing that is to define a user_context “Not_Allowed_PSTN” for a specific directory user 1010 (conf/directory/default/1010.xml):

      <variable name="user_context" value=" Not_Allowed_PSTN "/>

Create a new context called “Not_Allowed_PSTN” and handle those calls as you like or just add a prefix 0001 and send to the default context:

      <condition field="destination_number" expression="^(.*)$">

            <action application="transfer" data="0001$1 XML default"/>

      </condition>

Anyone have suggestions on how to the enable the following scenario?  Allow internal but control external per user.

More importantly how to disable or enable PSTN access for a specific user in a domain (profile)?

user1@domain1.com <--> FS <--> Allowed PSTN

user1@domain1.com <--> FS <--> user2@domain1.com

user2@domain1.com <--> FS <--> Not Allowed PSTN

user2@domain1.com <--> FS <--> user1@domain1.com

Thanks,

Roberto