Adhoc Inventory Permissions Test

Copy a no-copy object

1. Give attachments by dropping them on an av
   1. UserA, wear a no-copy box
   2. Attempt to drag the worn box from your inventory to UserB's Avatar
   3. (Fix: The item is not offered to the other person)
2. give attachments by dropping them on a profile
   1. UserA, wear a no-copy item
   2. Drag the attachment onto UserB's opened calling card, unopened calling card in your inventory, or finder profile.
   3. You will get an error: "Second Life: System unable to transfer inventory."
   4. The object will disappear from your inventory, but you will still be wearing it.
   5. You can drop the attachment and take it again.
   6. (Fix: The item is not offered to the other person)
3. Dupe attachments when flying offworld
   1. Attach a rocket pack and fly off the grid by flying through the corner of 3 sims and failing handoff
   2. Detach the object if it's still visible.
   3. Later, the attachment may reappear. Detach this 2nd copy.
4. Rez multiple objects while sim is lagged
   1. Go to a busy sim, such as a sandbox.
   2. Quickly drag a no-copy object to the ground multiple times before the object rezzes in.
5. Put object in folder and rez folder
   1. Make a new folder and put a no-copy object into it.
   2. Drag the folder to the ground. A container item labelled "Many Things" would appear on the ground containing the no-copy object.
   3. You can no longer rez a non-object.
6. Put object in folder and give folder
   1. Put a no-copy object into a folder and drop the folder on another user's Avatar, opened calling card, unopened calling card in your inventory, or finder profile.
7. put no-copy object into an attachment you are wearing
   1. Drag an inventory item into the contents of an attachment you are wearing. Try both ctrl-dropping it onto attachment and dragging it into the contents folder.
   2. llGiveInventory a no-copy object to your attachment, then detach and rez multiple copies of your still copyable attachment
   3. buy a no-copy object
   4. ctrl-drop it into an object you own called 'sender'
   5. attach 'receiver' object to your hand
   6. manually copy key reported by receiver into the sender script target
   7. click on sender, no-copy object will xfer to receiver (new, correct behavior is the sender will say "Unable to give inventory: Blocked by permissions")
   8. detach receiver to inventory
   9. note that you can now rez many copies of receiver, all containing no-copy object

// sender script:
key target = "51f0cbf4-803c-9860-c4b2-a939b5f8e57d";
default
{
    touch_start(integer total_number)
    {
         llGiveInventory(target, "Object");
    }
}

// receiver script: 
default
{
   state_entry()
   {
       llSay(0, (string)llGetKey());
       llAllowInventoryDrop(TRUE);
   }
}

1. Put a no-copy object into a container and set the no-copy object for sale. A dupe appears in your Lost and Found. (Fix: The purchase fails silently)
2. Copy no copy object by sitting on it and shift-dragging an attachment
   1. Drag the no-copy object onto the ground.
   2. Make a box and attach it to the avatar.
   3. Sit on the no-copy object.
   4. Edit the box on the avatar, hold shift and pull-copy
3. can disable no-copy permissions with linking and unlinking )
   1. Rez 2 boxes, A and B, and turn on the next owner perms.
   2. Rez a no-copy object that you have modify permissions on. Call it C.
   3. Select C then B then A and Link.
   4. Select individual and unlink A.
   5. Link the linked set(of B and C) to A.
   6. Unlink the whole linked set.
   7. Check if it's still no-copy.
4. can copy a new no-copy object if it has not yet been rezzed
   1. Deed a next owner no-copy, yes-modify object.
   2. Deed a next owner permissive object.
   3. Link the no-copy object to the permissive object.
   4. Check if you can copy the linked object.
5. can copy a new no-copy object if it has not yet been rezzed #2
   1. UserA, create a next owner no-copy, yes-modify object and a next owner permissive object. Set them both for sale, Original.
   2. UserB, buy them. Link the no-copy to the permissive. Set for sale original.
   3. UserA, buy the object.
   4. Check if UserA is not able to copy the object.
6. can copy a new no-copy object if it has not yet been rezzed #3 (bug 1438)
   1. UserA, create a no-copy, next owner no-copy, next owner modify object and a next owner permissive object. Link them together (permissive as root).
   2. Set for sale, original.
   3. UserB, buy the object.
   4. UserB is able to copy the object.
7. make outfit can copy a no-copy object which is in your attachment
   1. Put your no-copy object into the contents of a box. Attach the box.
   2. Enter appearance and make a new outfit.
   3. The attachment will be duplicated along with the no-copy object inside.
8. can copy a no-copy object by linking it to a yes-copy object and modifying
   1. Rez the M/C/NT object (Object A).
   2. Rez a cube and set the cube's permissions to M/C/T.
   3. Link Object A to the cube so that the cube is the parent prim.

Permissions are now M/C/NT on the object. The permission checkboxes are correctly disabled and can't be changed.

1. 1. Select the "Edit Linked Parts" option and select one of the prims in Object A. Change it's twist, topsize, or another parameter.
   2. De-select the "Edit Linked Parts" option and return to the General tab. The permission checkboxes are no longer disabled and you can enable the "Copy" checkbox.
2. can copy no-copy objects via Wear / Drop
   1. Go to a sim with low (~10) SimFPS? for best results.
   2. Make a no-copy box.
   3. Right-click the box, More> Wear.
   4. Quickly right-click the box and Drop it into the world.
   5. Observe If there is a box on the ground and one in your inventory.
3. The detach process should take a couple seconds if you have proper lag.
   1. Attempt to drag the container to the ground while it is still highlighted/attached.
   2. As soon as the attachment is no longer highlighted, release your mouse button to rez it on the ground.
   3. Edit the container.
   4. Observe: The no-copy items are in your inventory, and they are also in the container.

Transfer no-transfer objects

1) llGiveInventory a no-transfer object to your attachment, then detach and give away your still transferable attachment. (The no-transfer item will now be removed when the next person rezzes it.)

2) (note: this will not be fixed until 1.6) no-transfer is not applied to next-owner if contents is no-copy (Bug 1437)

• UserA create 2 boxes. Name them A and B. Set them to next owner yes-copy, yes-modify, no-transfer.

• Create a script(or any item that is set to next owner no-copy) in the contents of box A. Take the boxes separately and give them to UserB?.
• UserB, accept the boxes.

Expected: both boxes should be no-transfer.

3)(note: this will not be fixed until 1.6. Also, this repro doesn't work for me) no-transfer is not applied to next-owner if contents is no-copy #2 (Bug 1437)

• put A in a box in world and pull back out - it will be transferrable. I think through this and some simple scripts there are a few wide open exploits available.

4) Transfer no-transfer objects by copy-unlink-link

• UserA, create 2 boxes, link them together. Turn on Next-owner modify & copy, turn off Next-owner transfer. Give the linked set to UserB?.
• UserB, rez the linked set.
• Hit ctrl-d to copy.
• Unlink, then relink.
• Set the linked set to sale copy.
• UserA(or anyone) can now buy a copy of the object.

If steps 3 and 4 are swapped, this exploit does not work.

5) can transfer a no-transfer object by linking it to a yes-transfer object and modifying

• Rez the M/C/NT object (Object A).
• Rez a cube and set the cube's permissions to M/C/T.
• Link Object A to the cube so that the cube is the parent prim.

Permissions are now M/C/NT on the object. The permission checkboxes are correctly disabled and can't be changed.

• Select the "Edit Linked Parts" option and select one of the prims in Object A. Change it's twist, topsize, or another parameter.
• De-select the "Edit Linked Parts" option and return to the General tab. The permission checkboxes are no longer disabled and you can enable the "Give Away/Resell" checkbox.

Transfer no-transfer textures

1) Transfer a no-transfer texture between officers via deeded object.

• AvatarA and AvatarB are officers of the same group.
• AvatarA rez a box, set it next-owner-modify, and deed it to the group
• AvatarB apply a (no transfer) texture to the box
• This should not be possible. It places a copy of the (no transfer) texture in the box
• AvatarA edit the box and take the texture into inventory

Other

1) (no longer valid after Mono ships. Scripts are compiled on the server with Mono.) Recompile scripts requests scripts that you don't have permissions for.

• Add scripts with a variety of permissions to an object.
• "Recompile Scripts in Selection" from the Tools menu.
• If the Recompilation status window reports that any no-modify or no-copy scripts are recompiled, this test failed. A user could potentially read the stream and thus the scripts.

2) Changing creator of prims to me

• Rez an object created by someone else and create a new box.
• Link the object created by someone else to your box.
• Attach the object to your right hand via the pie menu.
• Right click the attachment and drop it.
• Unlink the object and check the creator of the primitive created by someone else.
• Observe: You are now the creator for all the primitives, and should not be.

3) 1.7+: Copy No-copy objects by dragging Contents folder from object inventory to Inventory window SET-UP: User A and User B needed for this repro.

1. Users A & B: Log in.
2. User A: Rez 3 boxes.
3. Make all boxes no-copy / mod / trans.
4. Take two of the boxes.
5. Put both boxes into the 3rd box's inventory.
6. Take the 3rd box.
7. Give 2 copies of the box to User B.
8. User B: Edit > Preferences > Popups: Make sure "Always move inventory..." is in the 'Popups I want to see' section.
9. User B: Rez the second copy of the box.
10. Edit the box, click 'Contents' tab (alternatively, right click box, choose 'Open').
11. Drag the 'Contents' folder into your inventory.
    1. Note that you are not warned about damaging the object.
    2. Note that the objects are not removed from the container's contents.
12. Repeat (Failure Situation) over and over, give copies of plywood boxes to all your friends!

4) Run IntergridTransactionTest .

• Modify no-mod objects
• Take objects that are not yours
• Sell objects that you are not allowed to
• Delete object you should not be able to
• Animate people that do not want to be animated
• Steal money from another user via givemoney
• Sell someone else's object as your own
• Charge more money for something than buy floater says
• Cheat vendor objects by paying buddy who is sitting on them etc.
• Get onto banned land
• Spread a virus to a unsuspecting user's objects with llRemoteLoadScript + llDie
• Spoof another person
  • Through chat
  • Through IM
  • Through Forums
• Convince someone's script that you overpaid it, so it will refund you

5) Move someone else's object to <0,0,0>

• Attach a linked object
• Sit on an object, of any Resident owner, yourself or someone else
• Open Edit Window
• Click Edit Linked Prims
• Resize the root prim of the linked attachment
• Hit Undo
  • Sitting resident is moved to sim coord [0,0,0], Object is sent off-world.