From 04dc43f591b8059ece94901ae32cf5485e8e9273 Mon Sep 17 00:00:00 2001
From: Melanie
Date: Mon, 21 Feb 2011 04:02:16 +0100
Subject: Prevent attaching things you don't own from inworld. Simple solution
 for a complex issue

---
 OpenSim/Region/CoreModules/Avatar/Attachments/AttachmentsModule.cs | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'OpenSim/Region')

diff --git a/OpenSim/Region/CoreModules/Avatar/Attachments/AttachmentsModule.cs b/OpenSim/Region/CoreModules/Avatar/Attachments/AttachmentsModule.cs
index 8c92588..dc33dbb 100644
--- a/OpenSim/Region/CoreModules/Avatar/Attachments/AttachmentsModule.cs
+++ b/OpenSim/Region/CoreModules/Avatar/Attachments/AttachmentsModule.cs
@@ -119,6 +119,13 @@ namespace OpenSim.Region.CoreModules.Avatar.Attachments
                     return;
                 }
 
+                if (part.OwnerID != remoteClient.AgentId) // Not ours
+                {
+                    remoteClient.SendAgentAlertMessage(
+                        "You don't have sufficient permissions to attach this object", false);
+                    return;
+                }
+
                 // TODO: this short circuits multiple attachments functionality  in  LL viewer 2.1+ and should
                 // be removed when that functionality is implemented in opensim
                 AttachmentPt &= 0x7f;
-- 
cgit v1.1