| 主权项 |
1. A method comprising:
receiving, at a network device, call control traffic for a communication to a destination device, the call control traffic being from an application associated with a first user at a source device; determining, by the network device, identification information for the first user and a second user, the second user being associated with the destination device, wherein the first and second user identification information is determined by performing mappings from the call control traffic to names of the first and second users; based on the identification information for the first and second user, determining, by the network device, a role of the first user within an organization with which the first user is associated, a role of the second user within an organization with which the second user is associated, and a relationship between the first user's role within the organization with which the first user is associated and the second user's role within the organization with which the second user is associated, wherein the roles and relationships are defined by regulation as to whether the first user can communicate with the second user; determining, by the network device, an action to take based on an entitlement policy associated with the relationship between the first user's role at the organization and the second user's role at the organization; and performing, by the network device, the action on the call control traffic, wherein the entitlement policy is enforced without modifying the application associated with the first user at the source device. |
