From 1f7d68e555bc927bb72028e149902b6b9aac40b8 Mon Sep 17 00:00:00 2001
From: Melanie <melanie@t-data.com>
Date: Mon, 27 Sep 2010 00:29:27 +0100
Subject: [PATCH] Restrict inventory items added in a transaction to folder
 belonging to the connected client.

---
 OpenSim/Region/Framework/Scenes/Scene.Inventory.cs | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/OpenSim/Region/Framework/Scenes/Scene.Inventory.cs b/OpenSim/Region/Framework/Scenes/Scene.Inventory.cs
index d3a14477d1..1bf6b87a43 100644
--- a/OpenSim/Region/Framework/Scenes/Scene.Inventory.cs
+++ b/OpenSim/Region/Framework/Scenes/Scene.Inventory.cs
@@ -832,6 +832,12 @@ namespace OpenSim.Region.Framework.Scenes
             if (!Permissions.CanCreateUserInventory(invType, remoteClient.AgentId))
                 return;
 
+            InventoryFolderBase f = new InventoryFolderBase(folderID, remoteClient.AgentId);
+            InventoryFolderBase folder = InventoryService.GetFolder(f);
+
+            if (folder == null || folder.Owner != remoteClient.AgentId)
+                return;
+
             if (transactionID == UUID.Zero)
             {
                 ScenePresence presence;