Rights inheritance

[François (tebu-bio)]

Another beginner question : how are rights inherited ?

Are rights on an extension overriding completely rights on a group ?
It seems more that they are cumulated, but I can't find a confirmation in the documentation. I'm doing some tests, and I can pickup calls while on my extension, I don't have the "perform operations" rights any longer. It would be nice to have a clarification somewhere about how rights are calculated. Or maybe I didn't find it, I'll be happy to be shown where this info is.

Also I have one case I don't understand, a user only in one group, with no other rights than "see group members" and "show presence", and he can pickup calls to users in other groups ! This group has also no more rights than the ones I mentioned. So I don't see where he could have those pickup rights. Are there generic rights by default that I'm missing somewhere ?

 

[Evolute IT]

Another beginner question : how are rights inherited ?

Are rights on an extension overriding completely rights on a group ?
It seems more that they are cumulated, but I can't find a confirmation in the documentation. I'm doing some tests, and I can pickup calls while on my extension, I don't have the "perform operations" rights any longer. It would be nice to have a clarification somewhere about how rights are calculated. Or maybe I didn't find it, I'll be happy to be shown where this info is.

Also I have one case I don't understand, a user only in one group, with no other rights than "see group members" and "show presence", and he can pickup calls to users in other groups ! This group has also no more rights than the ones I mentioned. So I don't see where he could have those pickup rights. Are there generic rights by default that I'm missing somewhere ?

For your pickup rights, you need to enable in Settings -> PBX, "Limit call pickup to call received in their extension group". This way, only people of the same group can pickup a call.

To assign a user to multiple group, you use the Groups section. You'll be able to add each users multiple times.

As for the rights, I think they are indeed cumulated but I am not 100% sure. I will have to do some testing on that.

 

[François (tebu-bio)]

Thanks for your answer. Yes I saw about group limitations and I know how groups are working. I still don't understand how one user belonging only to one group, with very limited rights (both on him and on the group) can have pickup rights. I closed and reopened his session. Still the same. Is there anything to do after setting rights ? Restarting something ? Or maybe the rights of the default group are applied to everybody ? But this user does not belong to this group. So I really don't understand how the rights are calculated.

 

[Evolute IT]

Thanks for your answer. Yes I saw about group limitations and I know how groups are working. I still don't understand how one user belonging only to one group, with very limited rights (both on him and on the group) can have pickup rights. I closed and reopened his session. Still the same. Is there anything to do after setting rights ? Restarting something ? Or maybe the rights of the default group are applied to everybody ? But this user does not belong to this group. So I really don't understand how the rights are calculated.

I really can't say. This behavior is not expected I am pretty sure.

IMO, groups would be the first level then the user-level would override the group. So if group has right to pickup but user not, it shouldn't work.

 

[François (tebu-bio)]

We have opened a support ticket with 3CX to try to understand it better. It's really weird, our partner doesn't understand it either. I will give you some feedback here when I have it, it could be interesting for others.

 

[Evolute IT]

We have opened a support ticket with 3CX to try to understand it better. It's really weird, our partner doesn't understand it either. I will give you some feedback here when I have it, it could be interesting for others.

I did all the 3CX certifications and read all docs. It isn't specified anywhere.