Add a forgotten security check. Make the new functions only work on prims

owned by the host prim owner.

1 files changed, 6 insertions, 0 deletions

diff --git a/OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs b/OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs
index 481a3e6..3c2ef34 100644
--- a/OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs
+++ b/OpenSim/Region/ScriptEngine/Shared/Api/Implementation/LSL_Api.cs
@@ -10268,6 +10268,9 @@ namespace OpenSim.Region.ScriptEngine.Shared.Api
             if (obj == null)
                 return;
 
+            if (obj.OwnerID != m_host.OwnerID)
+                return;
+
             SetPrimParams(obj, rules);
         }
 
@@ -10277,6 +10280,9 @@ namespace OpenSim.Region.ScriptEngine.Shared.Api
             if (obj == null)
                 return new LSL_List();
 
+            if (obj.OwnerID != m_host.OwnerID)
+                return new LSL_List();
+
             return GetLinkPrimitiveParams(obj, rules);
         }
     }