* Added hacked support for 'anyone can move' and 'anyone can copy'.

* BACKUP YOUR PRIM BEFORE UPDATING TO THIS and then double check the prim permissions after applying it with a different avatar (then the master avatar or the prim owner avatar).
* Also, beware that any objects created under the old permission scheme may react oddly.  They may automatically allow anyone to modify them, (which you'll then have to un-set).  
* It's hacked support because when 'anyone can move is set', any avatar can modify the prim (texture, shape, scale, etc)

1 files changed, 76 insertions, 113 deletions

diff --git a/OpenSim/Region/Environment/PermissionManager.cs b/OpenSim/Region/Environment/PermissionManager.cs
index 573fc29..37df180 100644
--- a/OpenSim/Region/Environment/PermissionManager.cs
+++ b/OpenSim/Region/Environment/PermissionManager.cs
@@ -35,7 +35,13 @@ namespace OpenSim.Region.Environment
     public class PermissionManager
     {
         protected Scene m_scene;
-
+        
+        // These are here for testing.  They will be taken out
+        private uint PERM_ALL = (uint)2147483647;
+        private uint PERM_COPY = (uint)32768;
+        private uint PERM_MODIFY = (uint)16384;
+        private uint PERM_MOVE = (uint)524288;
+        private uint PERM_TRANS = (uint)8192;
         // Bypasses the permissions engine (always returns OK)
         // disable in any production environment
         // TODO: Change this to false when permissions are a desired default
@@ -136,112 +142,7 @@ namespace OpenSim.Region.Environment
         #region Object Permissions
 
 
-        public virtual bool AnyoneCanCopyPermission(LLUUID user, LLUUID objId)
-        {
-
-            // Default: deny
-            bool permission = false;
-
-            if (!m_scene.Entities.ContainsKey(objId))
-            {
-                return false;
-            }
-
-            // If it's not an object, we cant edit it.
-            if (!(m_scene.Entities[objId] is SceneObjectGroup))
-            {
-                return false;
-            }
-
-            SceneObjectGroup task = (SceneObjectGroup)m_scene.Entities[objId];
-            LLUUID taskOwner = null;
-            // Added this because at this point in time it wouldn't be wise for 
-            // the administrator object permissions to take effect.
-            LLUUID objectOwner = task.OwnerID;
-            uint objectflags = task.RootPart.EveryoneMask;
-
-            // Object owners should be able to edit their own content
-            if (user == objectOwner)
-                permission = true;
-
-            // If the 'anybody can move' flag is set then allow anyone to copy it
-            if ((objectflags & (uint)LLObject.ObjectFlags.ObjectCopy ) != 0)
-                permission = true;
-
-            // Users should be able to edit what is over their land.
-            if (m_scene.LandManager.getLandObject(task.AbsolutePosition.X, task.AbsolutePosition.Y).landData.ownerID ==
-                user)
-                permission = true;
-
-            // Estate users should be able to edit anything in the sim
-            if (IsEstateManager(user))
-                permission = true;
-
-            // Admin objects should not be editable by the above
-            if (IsAdministrator(taskOwner))
-                permission = false;
-
-            // Admin should be able to edit anything in the sim (including admin objects)
-            if (IsAdministrator(user))
-                permission = true;
-
-            return permission;
-
-        }
-
-
-        public virtual bool AnyoneCanMovePermission(LLUUID user, LLUUID objId)
-        {
-
-            // Default: deny
-            bool permission = false;
-
-            if (!m_scene.Entities.ContainsKey(objId))
-            {
-                return false;
-            }
-
-            // If it's not an object, we cant edit it.
-            if (!(m_scene.Entities[objId] is SceneObjectGroup))
-            {
-                return false;
-            }
-
-            SceneObjectGroup task = (SceneObjectGroup)m_scene.Entities[objId];
-            LLUUID taskOwner = null;
-            // Added this because at this point in time it wouldn't be wise for 
-            // the administrator object permissions to take effect.
-            LLUUID objectOwner = task.OwnerID;
-            uint objectflags = task.RootPart.EveryoneMask;
-
-            // Object owners should be able to edit their own content
-            if (user == objectOwner)
-                permission = true;
-
-            // If the 'anybody can move' flag is set then allow anyone to move it
-            if ((objectflags & (uint)LLObject.ObjectFlags.ObjectMove) != 0)
-                permission = true;
-
-            // Users should be able to edit what is over their land.
-            if (m_scene.LandManager.getLandObject(task.AbsolutePosition.X, task.AbsolutePosition.Y).landData.ownerID ==
-                user)
-                permission = true;
-
-            // Estate users should be able to edit anything in the sim
-            if (IsEstateManager(user))
-                permission = true;
-
-            // Admin objects should not be editable by the above
-            if (IsAdministrator(taskOwner))
-                permission = false;
-
-            // Admin should be able to edit anything in the sim (including admin objects)
-            if (IsAdministrator(user))
-                permission = true;
-
-            return permission;
-
-        }
+       
         public virtual uint GenerateClientFlags(LLUUID user, LLUUID objID)
         {
             if (!m_scene.Entities.ContainsKey(objID))
@@ -260,6 +161,9 @@ namespace OpenSim.Region.Environment
             // Added this because at this point in time it wouldn't be wise for 
             // the administrator object permissions to take effect.
             LLUUID objectOwner = task.OwnerID;
+
+            //return task.RootPart.ObjectFlags;task.RootPart.ObjectFlags | 
+
             uint OwnerMask = task.RootPart.ObjectFlags | task.RootPart.OwnerMask;
             uint GroupMask = task.RootPart.ObjectFlags | task.RootPart.GroupMask;
             uint EveryoneMask = task.RootPart.ObjectFlags | task.RootPart.EveryoneMask;
@@ -288,7 +192,20 @@ namespace OpenSim.Region.Environment
             if (IsAdministrator(user))
                 return OwnerMask;
 
-            return 0;
+            if (((EveryoneMask & PERM_MOVE) != 0) || ((EveryoneMask & PERM_COPY) != 0))
+            {
+                if ((EveryoneMask & PERM_MOVE) != 0)
+                    OwnerMask &= ~PERM_MOVE;
+
+                if ((EveryoneMask & PERM_COPY) != 0)
+                    OwnerMask &= ~PERM_COPY;
+
+                OwnerMask &= ~PERM_MODIFY;
+                OwnerMask &= ~PERM_TRANS;
+
+                return OwnerMask;
+            }
+            return EveryoneMask;
         }
 
         protected virtual bool GenericObjectPermission(LLUUID user, LLUUID objId)
@@ -353,15 +270,61 @@ namespace OpenSim.Region.Environment
             return GenericObjectPermission(user, obj);
         }
 
-        public virtual bool CanReturnObject(LLUUID user, LLUUID obj)
+        public virtual bool CanEditObjectPosition(LLUUID user, LLUUID obj)
         {
-            return GenericObjectPermission(user, obj);
+            bool permission = GenericObjectPermission(user,obj);
+            if (!permission)
+            {
+                if (!m_scene.Entities.ContainsKey(obj))
+                {
+                    return false;
+                }
+
+                // If it's not an object, we cant edit it.
+                if (!(m_scene.Entities[obj] is SceneObjectGroup))
+                {
+                    return false;
+                }
+
+                SceneObjectGroup task = (SceneObjectGroup)m_scene.Entities[obj];
+                LLUUID taskOwner = null;
+                // Added this because at this point in time it wouldn't be wise for 
+                // the administrator object permissions to take effect.
+                LLUUID objectOwner = task.OwnerID;
+                if ((task.RootPart.EveryoneMask & PERM_MOVE) != 0)
+                    permission = true;
+            }
+            return permission;
         }
-
         public virtual bool CanCopyObject(LLUUID user, LLUUID obj)
         {
-            return true;
-           // return GenericObjectPermission(user, obj);
+            bool permission = GenericObjectPermission(user, obj);
+            if (!permission)
+            {
+                if (!m_scene.Entities.ContainsKey(obj))
+                {
+                    return false;
+                }
+
+                // If it's not an object, we cant edit it.
+                if (!(m_scene.Entities[obj] is SceneObjectGroup))
+                {
+                    return false;
+                }
+
+                SceneObjectGroup task = (SceneObjectGroup)m_scene.Entities[obj];
+                LLUUID taskOwner = null;
+                // Added this because at this point in time it wouldn't be wise for 
+                // the administrator object permissions to take effect.
+                LLUUID objectOwner = task.OwnerID;
+                if ((task.RootPart.EveryoneMask & PERM_COPY) != 0)
+                    permission = true;
+            }
+            return permission;
+        }
+        public virtual bool CanReturnObject(LLUUID user, LLUUID obj)
+        {
+            return GenericObjectPermission(user, obj);
         }
 
         #endregion