I'm used to create an extension for maintenance and tests on customers 3CX installs, this extension is alone in a special group in order to mask this extension from other extensions.
But with 3CX V16, I encountered a strange behavior. Although this extension has only default user's rights" when I allow this extension to manage all extensions, I can also manage Inbounds Rules and Contacts. And also when I'm logged in with another extension which has only default user's rights but is allowed to "manage extensions in group you are part of" I can grant admin rights to all shown extensions.
But with 3CX V16, I encountered a strange behavior. Although this extension has only default user's rights" when I allow this extension to manage all extensions, I can also manage Inbounds Rules and Contacts. And also when I'm logged in with another extension which has only default user's rights but is allowed to "manage extensions in group you are part of" I can grant admin rights to all shown extensions.
