[admin]
secret = amp111
deny=0.0.0.0/0.0.0.0
permit=127.0.0.1/255.255.255.0
permit=10.5.4.0/255.255.255.0
read = system,call,log,verbose,command,agent,user,config,dtmf,reporting,cdr,dialplan
write = system,call,log,verbose,command,agent,user,config,command,reporting,originate

EN la rama 1.6 de *, los permisos son más atómicos y hay que especificar si quieres hacer marcado:

; Authorization for various classes
;
; Read authorization permits you to receive asynchronous events, in general.
; Write authorization permits you to send commands and get back responses. The
; following classes exist:
;
; system – General information about the system and ability to run system
; management commands, such as Shutdown, Restart, and Reload.
; call – Information about channels and ability to set information in a
; running channel.
; log – Logging information. Read-only.
; verbose – Verbose information. Read-only.
; agent – Information about queues and agents and ability to add queue
; members to a queue.
; user – Permission to send and receive UserEvent.
; config – Ability to read and write configuration files.
; command – Permission to run CLI commands. Write-only.
; dtmf – Receive DTMF events. Read-only.
; reporting – Ability to get information about the system.
; cdr – Output of cdr_manager, if loaded. Read-only.
; dialplan – Receive NewExten and VarSet events. Read-only.
; originate – Permission to originate new calls. Write-only.

;read = system,call,log,verbose,agent,user,config,dtmf,reporting,cdr,dialplan
;write = system,call,agent,user,config,command,reporting,originate