Restrict inventory items added in a transaction to folder belonging

to the connected client.
avinationmerge
Melanie 2010-09-27 00:29:27 +01:00
parent 9f17ae580d
commit 34e8bf45b6
1 changed files with 6 additions and 0 deletions

View File

@ -834,6 +834,12 @@ namespace OpenSim.Region.Framework.Scenes
if (!Permissions.CanCreateUserInventory(invType, remoteClient.AgentId)) if (!Permissions.CanCreateUserInventory(invType, remoteClient.AgentId))
return; return;
InventoryFolderBase f = new InventoryFolderBase(folderID, remoteClient.AgentId);
InventoryFolderBase folder = InventoryService.GetFolder(f);
if (folder == null || folder.Owner != remoteClient.AgentId)
return;
if (transactionID == UUID.Zero) if (transactionID == UUID.Zero)
{ {
ScenePresence presence; ScenePresence presence;