55 lines
2.3 KiB
YAML
55 lines
2.3 KiB
YAML
# Updated via Autotest Editor - 2026-05-27T09:41:49.889Z
|
|
# Source of truth: this YAML file
|
|
# Note: Expected results estimated based on step actions
|
|
|
|
id: pbx-calls-security-check-toll_fraud_prevention_rules_and_alerting
|
|
module: pbx
|
|
group: pbx-calls-security
|
|
title: Verify toll fraud prevention rules and alert notifications are configured
|
|
description: Verify toll fraud prevention rules and alert notifications are configured
|
|
priority: Medium
|
|
tags: []
|
|
references: []
|
|
dependencies:
|
|
- label: Admin Portal
|
|
value: https://pbx.local:4443 (configure via $BASE_URL)
|
|
- label: Repository URL
|
|
value: ${BASE_URL}/downloads or $REPO_URL
|
|
- label: Protocol
|
|
value: HTTPS + SIP (UDP/TCP/TLS) + RTP/SRTP
|
|
- label: SIP Endpoints
|
|
value: 'At least 2 registered SIP clients (deskphone or softphone: Zoiper, MicroSIP, Yealink, etc.)'
|
|
- label: Network
|
|
value: SIP trunk or local Asterisk/FreeSWITCH simulator for PSTN simulation
|
|
- label: Credentials
|
|
value: Admin user with sufficient privileges (portal + SSH where needed)
|
|
- label: Test Data
|
|
value: Clean test tenant or lab PBX instance (recommended isolated environment)
|
|
preconditions: []
|
|
postconditions: []
|
|
steps:
|
|
- action: Open admin portal or repository URL in browser context
|
|
expected: >-
|
|
The admin portal or repository page loads successfully without errors, security warnings, or
|
|
redirects.
|
|
- action: Log in to the admin portal (if required)
|
|
expected: >-
|
|
Authentication succeeds using the provided credentials and the user is taken to the main
|
|
dashboard.
|
|
- action: Navigate to the relevant settings section
|
|
expected: The correct configuration page or section for the feature is displayed.
|
|
- action: Read current configuration values via UI or API
|
|
expected: >-
|
|
Current configuration values are successfully retrieved via the UI or API and match the known
|
|
baseline.
|
|
automation_status: automated
|
|
file: tests/pbx/calls-security.spec.ts
|
|
custom_fields:
|
|
original_action: check
|
|
automatable:
|
|
- Full end-to-end execution via Playwright against the admin portal UI
|
|
- Navigation, form interaction, and assertions are scriptable
|
|
notYet:
|
|
- Real RTP/SRTP media path and audio quality verification (human ear or PESQ/MOS tools)
|
|
- External SIP trunk / PSTN connectivity and DID numbers
|