No restrictions on BLF keys

[yules67]

Hello,

Today a customer pointed out to me that BLF keys can be used to intercept a call, regardless of user rights.
After a few tests, I can confirm: a BLF key allows you to intercept a call from any user, even from another department, without needing any special rights/role, and no matter how the “view” tab is configured.

Is this normal, or have I missed an option somewhere?

This is especially problematic as it's not possible to restrict the configuration of BLF keys to individual users, and when they configure these keys, the user list displayed contains all the extensions, even those of departments that should be hidden for a simple user.

 

[JohnS_3CX]

Is this normal, or have I missed an option somewhere?

Yes and yes

Admin Console > System > Options > Limit call pickup to calls received within the same department

This will prevent people from one department picking up calls from another.

 

[yules67]

Thanks ! Sad that the BLF don't follow the "View" rights, but this options helps a bit