[Opensim-dev] Change parcel permission handling

[Oren Hurvitz]

I thought that estate managers do have full permissions over all of their
parcels. After all, they can choose who *gets* the parcels. The solution
you suggested already exists: it is possible to specify multiple
permissions for OSSL functions. So that's off the table.

It's still confusing to have two sets of permission checks: one in
OpenSim.ini, and another one in code (where it's pretty much "secret"
unless you're a developer). But I'm going to let sleeping dogs lie. So for
these functions
(osSetParcelDetails, osSetParcelMediaURL, osSetParcelSIPAddress)
OpenSim.ini should be configured to allow anyone to call these functions,
and we'll trust the code in OSS_Api.cs to perform the real permission check.

Oren


On Fri, Apr 13, 2012 at 4:02 PM, Melanie-2 [via opensim-dev] <
ml-node+s2196679n7462603h7 at n2.nabble.com> wrote:

> Not true.
>
> Even in SL estate owners/managers don't have some parcel rights. If
> I specify parcel owner, i expect parcel owner. Maybe a way needs to
> be found to combine multiple strings, e.g.
> ESTATE_MANAGER,PARCEL_OWNER. That would be acceptable. Changing the
> current behavior that people already depend on to relax security is
> not acceptable. It may mean that someone suddenly can do something
> they could not do before and the owners may not be aware of this,
> causing issues.
>
> Also, in case of a group owned parcel, group permissions govern what
> people in the group can do. Group members are by no means owners,
> often parcels are deeded only for access control but normal members
> have no rights whatsoever. Giving them potentially dangerous
> functions is not an option.
>
> On group owned parcels, those functions can be allowed either to
> group owners only (the group invite functions already do this check)
> or to deeded prims only. Allowing them for every member of the group
> is really bad. You don't really want to have your roleplay's members
> osTeleportAgent the opponents out of the fight!
>
> Again, relaxing existing constraints is not an option, but as you
> can see above, ways can be found to define combinations of
> permissions to allow more flexibility.
>
> Melanie
>
>


--
View this message in context: http://opensim-dev.2196679.n2.nabble.com/Remove-check-for-IsGod-in-some-OSSL-functions-tp7462127p7462720.html
Sent from the opensim-dev mailing list archive at Nabble.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://opensimulator.org/pipermail/opensim-dev/attachments/20120413/0f2f68f0/attachment-0001.html>