[JIRA] Issue Comment Edited: (SVC-5054) No-Modify object is modifiable: anyone can disassemble and steal its contents

Nicole Lassally (JIRA) no-reply at lindenlab.cascadeo.com
Mon Nov 16 17:41:04 PST 2009


    [ http://jira.secondlife.com/browse/SVC-5054?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=146978#action_146978 ] 

Nicole Lassally edited comment on SVC-5054 at 11/16/09 5:40 PM:
----------------------------------------------------------------

No, the object is no-modify, but it allows you to modify its content by removing the scripts or anything inside the content out of the object.

It is not the expected behavior, because no-mod means no-modification.  Removing scripts or anything inside its content is MODIFY!

It is no different from dissembling the links (i.e., unlink them) and take each of the prims out of the object.  That is modification!

As of now, no-mod does not allow anyone to dissemble any of the linked parts out by unlinking them.  BUT it allows someone to dissemble the contents inside any of its prims.  Not only can anyone dissemble its content, but also copy its contents into the inventory, and use any of its part to build your own thing.

In other words, someone can completely steal the script inside an object and build another object containing every single scripts that were stolen from someone's object.  That is, there is absolutely no protection on any of the scripts from someone stealing them and putting them in any object you wish, or reproduce the exact object.

That is not what NO MODIFY means in the permission.  It allows someone to modify the original object, and remove scripts from it (whereas removing prims from the object is not allowed).

THIS IS NOT THE EXPECTED BEHAVIOR.

      was (Author: Nicole Lassally):
    No, the object is no-modify, but it allows you to modify its content by removing the scripts or anything inside the content out of the object.

It is not the expected behavior, because no-mod means no-modification.  Removing scripts or anything inside its content is MODIFY!
  
> No-Modify object is modifiable: anyone can disassemble and steal its contents
> -----------------------------------------------------------------------------
>
>                 Key: SVC-5054
>                 URL: http://jira.secondlife.com/browse/SVC-5054
>             Project: 2. Second Life Service - SVC
>          Issue Type: Bug
>          Components: Permissions
>    Affects Versions: 1.32 Server
>            Reporter: Nicole Lassally
>            Priority: Major
>
> To reproduce permission bug:
> * Create an object
> * Set permission to copy-only (no-modify and no-transfer)
> * Put anything into its content with any permission, i.e., create a script with no-permission or drop an object with no-permission.
> * Give this object to someone
> * Once delivered, rez the object in-world and open its content
> * Copy all its contents (scripts including) into inventory
> * The contents deliver into inventory
> This means that anyone can disassemble all the scripts of an no-modify object, and steal them even when the object is no-modify!

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.secondlife.com/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        


More information about the Jira-notify mailing list