More HG2.0: Added permission policies in HGAsset Service based on asset types. The policies are given in the config. This is only half of the story. The other half, pertaining to exports/imports made by the sim, will be done next.

2 files changed, 21 insertions, 0 deletions

diff --git a/bin/Robust.HG.ini.example b/bin/Robust.HG.ini.example
index fad399d..8218b14 100644
--- a/bin/Robust.HG.ini.example
+++ b/bin/Robust.HG.ini.example
@@ -437,6 +437,16 @@ ServiceConnectors = "8003/OpenSim.Server.Handlers.dll:AssetServiceConnector,8003
     UserAccountsService = "OpenSim.Services.UserAccountService.dll:UserAccountService"
     HomeURI = "http://127.0.0.1:8002"
 
+        ;; The asset types that other grids can get from / post to this service.
+        ;; Valid values are all the asset types in OpenMetaverse.AssetType, namely:
+        ;; Unknown, Texture, Sound, CallingCard, Landmark, Clothing, Object, Notecard, LSLText, LSLBytecode, TextureTGA, Bodypart, SoundWAV, ImageTGA, ImageJPEG, Animation, Gesture, Mesh 
+        ;;
+        ;; Leave blank or commented if you don't want to apply any restrictions.
+        ;; A more strict, but still reasonable, policy may be to disallow the exchange 
+        ;; of scripts, like so:
+    ; DisallowGET ="LSLText"
+    ; DisallowPOST ="LSLBytecode"
+
 [HGFriendsService]
         LocalServiceModule = "OpenSim.Services.HypergridService.dll:HGFriendsService"
         UserAgentService = "OpenSim.Services.HypergridService.dll:UserAgentService"
diff --git a/bin/config-include/StandaloneCommon.ini.example b/bin/config-include/StandaloneCommon.ini.example
index e4bc548..d8ecba8 100644
--- a/bin/config-include/StandaloneCommon.ini.example
+++ b/bin/config-include/StandaloneCommon.ini.example
@@ -53,6 +53,17 @@
 [HGAssetService]
     HomeURI = "http://127.0.0.1:9000"
 
+    ;; The asset types that other grids can get from / post to this service.
+        ;; Valid values are all the asset types in OpenMetaverse.AssetType, namely:
+        ;; Unknown, Texture, Sound, CallingCard, Landmark, Clothing, Object, Notecard, LSLText, LSLBytecode, TextureTGA, Bodypart, SoundWAV, ImageTGA, ImageJPEG, Animation, Gesture, Mesh 
+        ;;
+        ;; Leave blank or commented if you don't want to apply any restrictions.
+        ;; A more strict, but still reasonable, policy may be to disallow the exchange 
+        ;; of scripts, like so:
+    ; DisallowGET ="LSLText"
+    ; DisallowPOST ="LSLBytecode"
+
+
 [HGInventoryAccessModule]
     HomeURI = "http://127.0.0.1:9000"
         Gatekeeper = "http://127.0.0.1:9000"