| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
due to permissions (in QueryAccess and IsAuthorizedForRegion)
|
| |
|
| |
|
|
|
|
|
|
|
| |
was not active
Unfortunately, the OnLoginsEnabled event is currently only guaranteed to fire if the RegionReady module is active.
However, we can instantiate the AuthorizationService in the module RegionLoaded method since by this time all other modules will have been loaded
|
|
|
|
| |
DisallowForeigners (means what it says) and DisallowResidents (means that only admins and managers can get into the region). This puts the never-completed AuthorizationService to good use. Note that I didn't implement a grid-wide Authorization service; this service implementation is done entirely locally on the simulator. This can be changed as usual by pluging in a different AuthorizationServicesConnector.
|
|
|
|
|
|
|
|
|
|
| |
in via hypergrid.
If a user account isn't available, this just passes on the name given by the agent instead.
I'm not sure this is particularly useful since I believe that agent names could be faked in this context - it might be no more useful than a viewer agent string.
In fact, there might even be an argument that passing on this name provides a false expectation of authenticity. However, I will apply for now.
Patch applied from http://opensimulator.org/mantis/view.php?id=5696
Thanks Michelle Argus.
|
| |
|
|
|
|
|
|
|
|
|
|
| |
authorization service rather than from the account.
This is to accomodate situations where the authorization service is being used by the hypergrid, where visitors have no user account.
See http://opensimulator.org/mantis/view.php?id=5517, this code is somewhat adapted/cleaned up from Michelle's patch
I'm a little ambivalent about this since visitors could put anything in firstname/lastname so it's not much of an auth measure.
It's up to the auth service to decide which data it actually uses.
Possibly we should be passing through other info such as agent circuit ip
|
| |
|
|
|
|
|
| |
* Started rerouting calls to UserService.
* Compiles. May run.
|
| |
|
| |
|
|
|
|
| |
and can be displayed at the client when an avatar is denied access to a region
|
| |
|
| |
|
|
|
|
|
|
| |
IAuthorization interface method isAuthorizedForRegion looks up user and region data and delegates the remote authorization check to the AuthorizationServiceConnector
This keeps the IAuthorization as clean as possible and moves the dependency of using a UserProfileData object out to the connector from the scene.
|
| |
|
| |
|
|
always grant access to an avatar entering the region if requested.
|