Mantis #2072

Griefer protection! When running without serverside permissions, let only
the owner edit attachments. Having everyone able to do it just isn't right.

1 files changed, 14 insertions, 1 deletions

diff --git a/OpenSim/Region/Environment/Modules/World/Permissions/PermissionsModule.cs b/OpenSim/Region/Environment/Modules/World/Permissions/PermissionsModule.cs
index eb078d6..acc88bf 100644
--- a/OpenSim/Region/Environment/Modules/World/Permissions/PermissionsModule.cs
+++ b/OpenSim/Region/Environment/Modules/World/Permissions/PermissionsModule.cs
@@ -659,7 +659,20 @@ namespace OpenSim.Region.Environment.Modules.World.Permissions
             private bool CanMoveObject(LLUUID objectID, LLUUID moverID, Scene scene)
             {
                 DebugPermissionInformation(MethodInfo.GetCurrentMethod().Name);
-                if (m_bypassPermissions) return m_bypassPermissionsValue;
+                if (m_bypassPermissions)
+                {
+                    SceneObjectPart part = scene.GetSceneObjectPart(objectID);
+                    if (part.OwnerID != moverID)
+                    {
+                        if (part.ParentGroup != null &&
+                            part.ParentGroup.RootPart != null)
+                        {
+                            if (part.ParentGroup.RootPart.IsAttachment)
+                                return false;
+                        }
+                    }
+                    return m_bypassPermissionsValue;
+                }
 
                 bool permission = GenericObjectPermission(moverID, objectID, true);
                 if (!permission)