Permissions question

If you box an object that's mod/copy/no trans, and the box you put it in is mod/copy/trans, will the next owner be able to give away copies of the box with the no trans item in its inventory?

I ask because (precopybot) a customer returned to me a copy of an object I had sold that now had full perms, even though I had set the object perms to modify/copy/no trans. I am still trying to figure out how that could have happened. The only way I can figure it is that I had sold it in a box that had modify/copy/trans permissions (by mistake), even though the object perms themselves were modify/copy/no trans.

As far as I know, your item is still no transfer, but they can give the box away if they want, minus the contents.
So no, as far as I know, you can never give away a no transfer item no matter what the permissions of the box were.

Containers do not take on minimum permissions of their contents until they've been rezzed and taken back into inventory.

As such, if you put a no-perms item into a full-permed container, the owner can freely give away copies of both container and contents until the cows come home, because the system only checks the permissions of the actual object being given (the container), not any of the contents.

As such, it is wise to set at least no-transfer on your containers to prevent such from happening.

Wasn't this exploit fixed?

Containers never take on the permissions of their contents as far as I know, they're separate things. If you put a no mod item in a full permission box, the box is still full permission after transfer and can be changed to a sphere etc. If you put a no transfer item inside of a box, then you can't transfer the box without taking the item out, if you put in a no copy, you can't copy it without taking it out though. I tested before posting .

What can happen apparantly (from memory) is that you give someone a NM/NC/T item which they never rez and then they give it back to you. When you rez it, it'll be a full permission item even though you'd except NM/NC/T permissions. There's 2 or 3 post from Kelly burried in LA that went into this in detail.

There was a full permission bug a while back, it could be that. Another possibility is that you set next owner permissions in inventory only without rezzing it in world, or you set permissions on the box, but forgot to set them for the inventory as well? A lot of people seem to forget to do this, especially in poseballs.

I always use my alt to buy/give anything to make sure I get all the permissions right .

I don't think that it qualifies as an exploit - it's not something that someone else can do to you, so much as a mistake you can make. And I don't think it's been fixed.

OK. Let me clarify:

Yes, what I meant was that the containers "sum up" the negative permissions of their contents as well as themselves, and yes, deleting objects inside does change the permissions on the container more towards its own perms.

The problem is this:

The way the permissions system works, you cannot create a no-copy/no-transfer item. You can create a copy/notrans or a nocopy/trans, or even a copy/trans, but you can't deny someone both copy and trans without some trick (like putting in a no-trans subitem inside a no-copy/trans item, but then someone can just delete that subitem to get around it).

And, yes, they did fix the permissions problem on transfer; so the issue of putting a no-trans item in a full permed box and giving it to someone else will prevent them from giving either away. However, if you want to prevent copy AND transfer, you can't do it (with the ineffective exception noted above).

It would, if as the post suggests, you were able to run off 100s of copies of an item with restricted perms just by placing it into another item with full perms.

thanks everyone. I am still pretty confused about permissions, but then I guess I am not alone.

I am especially confused about permissions set in inventory and "baking" and stuff. But there again I guess I am not alone, either!

From what the Lindens seem to say, if it's anything that's going to be rezzed in world (prims) then you need to rez it first, set the permissions, then take it back. If you only set the permissions when it's in your inventory, it apparantly won't be any good.

If you're not sure if you set everything correctly, then try what I suggested, and get an alt to give something to, or buy it and then check what permissions everything ends up with. It's the only real way I know to be absolutely sure you set everything the way you meant to .