Attach without permission(?)

I'm currently working on an item that would be worn and can rez and attach other items to the wearer. The idea is simple enough, except that my understanding is that an object can never be attached to an avatar without first requesting permission, though naturally this approach seems a bit cumbersome.

I recall seeing once a command rope that, when a command is spoken, attaches a gag to the wearer's mouth. I know that this device did not request permission every time to attach the gag and I'm curious whether anybody knows how this works.

Does permission only have to be granted once per item key, in which case I suppose the item that is being rez'd would have the same key and therefore the permission would carry over? Or am I barking up the wrong tree?

Most likely what you were seeing was a simple trick with alpha - the 'gag' was an invisible object (0% alpha) that became 100% when the command was given... no attachment nonsense necessary.

I had considered that possibility, but when the gag (not the bracelet) is removed, it creates a "used gag" item in the wearer's inventory, so somehow the script must actually be rezing an object.

could have been granted permissions then loaded into the object (ie give once)

I have an object (a hat) which I created that is attached to my head. Periodically, it rezzes (from its own inventory) another part which then attaches to the hand. When done, that second attachment detaches and goes into inventory. It does not ask permissions every time. I do not remember anymore what I did (if anything) to make that happen. But I think that you are on the right track when you say that it asks once and then assumes it has permission until something happens to revoke it. Come to think of it, I think that even if I remove the hat from my head and then put it on again, I still do not get asked about permissions.

For what it's worth.
Baron H.

From what I remember permissions are asked per script. Meaning that once you grant the script permissions it'll keep them. What this means iirc is that you need to grant permissions on ground once, THEN load into the prim. The only issue with this if it's true is that you need to instruct each customer to do this step to "setup" the product (assuming it's for sale). Certainly worth testing in world though (unfort. I'm not avail to do that soon.) Please let me know what you come up with.