Mantis Bug Tracker

View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0005900opensim[REGION] OpenSim Corepublic2012-02-21 11:012014-04-24 19:03
ReporterMatto 
Assigned To 
PriorityhighSeveritymajorReproducibilityalways
StatusnewResolutionopen 
PlatformLinuxOSOS VersionCentos
Product Version 
Target VersionFixed in Version 
Summary0005900: Group Tag permissions not taking effect
DescriptionSetting no rez to a assigned group tag fails to follow the correct perm. When you set the tag to not allow build but it still allows them then something is a bit scewy
Steps To Reproduce1)Deed land to a group
2)Set about Land to Create Objects to Group only
3)Change "Everyone" tag so it doesnt allow create objects
4)Get another normal user whos in "Everyone" tag only to rez a prim on the deeded land
5)Shouldnt be able to rez but still does

Perms show for tag in .jpg
TagsNo tags attached.
Git Revision or version numberOSgrid 0.7.3 (Dev) eea726d: 2012-01-19
Run Mode Grid (1 Region per Sim)
Physics EngineODE
Script Engine
EnvironmentMono / Linux32
Mono Version2.10
ViewerImprudence 1.4 beta 2
Attached Filesjpg file icon grp-rights.jpg [^] (37,313 bytes) 2012-02-21 11:01

- Relationships

-  Notes
(0020915)
WhiteStar (reporter)
2012-02-21 11:28

I can confirm this is ocuring as I tested on Matto's region and another region with another similarly set group.
(0025878)
alecia ashbourne (reporter)
2014-04-23 19:38

I can also confirm this, my testing is as follows:

Regardless if land is 'allow deed to group' or not the result is the same.



Create a group, give create object and script permissions to member.
Enable group build and group script permissions for land.
Group member can create object and also create a new script within the object.
script compiles but does not run ... this is repeatable.
Group member can res scripted objects from inventory, but scripts do not run.
Worn scripts will not run.


Disable create object and create script for group member.
Group member can still res object and create scripts.
Scripts compile but do not run.
Group member can res scripted objects from inventory, but scripts do not run.
Worn scripts will not run.


Disable group build and group script permissions for land.
Group member can still res object and create scripts.
Scripts compile but do not run.
Group member can res scripted object from inventory, but scripts do not run.
Worn scripts will not run.


If group member de-activates group. or activates another group -
Group member can still res objects and create scripts.
Group member can res scripted objects from inventory, but scripts do not run.
Worn scripts will not run.

Re log avatar - build and script create permissions remain as above.
Reboot region - build and script create permissions remain as above.

land group however, remains pertinent; if the land is set to no group or
another group, then all permissions are revoked for group member as expected.

If group member 'leaves' group, then avatar can neither build or res objects
from inventory. Avatar cannot create scripts.
Worn scripts will not run.



To summarise:

If an avatar is a member of the group that the land is set to, then by
default this avatar can build and create scripts on that land, but scripts
do not run, this is regardless of weather the group is active for that
member or not and regardless of what 'group' permissions are set in the
'about land > options tab'.

The only way to revoke permissions for that group, is to set land to no
group or a different group, or for the avatar to leave that group.

As for scripts - the only way a non owner avatar can create, compile and run
scripts on said region, is:

1. Set the avatar as a region manager giving full permissions as expected.
2. Set allow 'all residence' to create scripts in 'about land > options tab'.
3. Sell a parcel of land to the avatar which allows that avatar to run
   scripts on that parcel on that region, but no where else on that region.


The inability of group members to run scripts, and persistence of group
permissions is a major functionality issue, unless we are looking at a one
user one region scenario, or opening up region functionality to griefers.



I have repeated this on an osgrid varregion with BulletSim:

OSgrid 0.8.0 (Dev) a893fd9

Metropolis Megaregion and OpenDynamicsEngine:

OS 0.7.6 Rel. / Metropolis-Edition [012]Release



My servers are running on:
Ubuntu 13.04 (GNU/Linux 2.6.32-042stab085.17 i686)


MySQL server: 5.5.34-0ubuntu0.13.04.1
Mono version: JIT compiler version 2.10.8.1 (Debian 2.10.8.1-5ubuntu1)


My client is running on:
Linux Mint 16 cinnamon 64-bit 3.11.0-12-generic

(repeatable on windows 7)

Clients tested:

Singularity-x86_64-1.8.5.5617
Firestorm 4.6.1 (40478)
(0025893)
Vanessa Welles (reporter)
2014-04-24 19:03
edited on: 2014-04-24 19:04

I can also confirm this issue in both OS grid and Metropolis grid using new Varregions. The issue I observe is that setting Group permissions true to run scripts for group members that are SAME GROUP that the land is set to.... FAILS.
Group members are unable to run worn scripts and not allowed to compose new scripts in objects they own.
Group permissions do work correct for rezzing objects. But not for scripts.
This is very bad because I need to set script permissions to ALL for my group members thus exposing my regions to Griefers !
 I use Singularity new viewer.


- Issue History
Date Modified Username Field Change
2012-02-21 11:01 Matto New Issue
2012-02-21 11:01 Matto File Added: grp-rights.jpg
2012-02-21 11:28 WhiteStar Note Added: 0020915
2014-04-23 19:38 alecia ashbourne Note Added: 0025878
2014-04-24 19:03 Vanessa Welles Note Added: 0025893
2014-04-24 19:04 Vanessa Welles Note Edited: 0025893 View Revisions


Copyright © 2000 - 2012 MantisBT Group
Powered by Mantis Bugtracker