Permissions and Scripting

OK - I think I have permissions pretty well down and I have basic scripting pretty well in hand at this point. Putting the two together, however, has me stumped!

I'm currently working on an object that talks to a web server. I want the object to be infinitely copyable. Once the object has been validated with the web server, however, I want to somehow provide a non-copyable non-modifiable object that is tagged with a validation key. I want to use the object key as the key to my database. I'd use the AV key, except it is possible for a single AV to want multiples. The immediate questions become then....

Can a copyable object contain and rez (or give) a non-copyable object with the same owner?
This implies that copies are made as the parent is copied - but it can not be copied itself once it is removed from the parent container.

Can a NON-modifiable object be modified by a script it already contains?
I want the web server to be able to update the object via a script - but I don't want the AV to be able to mod or copy it.

This is difficult to test with one's self. I don't want to bug friends with it until I at least have a basic concept and working model.

One other option might be to change the permissions upon validation. I understand that scripting commands to do this are in the works but not yet released... right?

Thanks in advance for pointing me in the right direction.

Yeah, I think I know where you're coming from, I have copyable objects that rez no copy/no mod perms all the time, just set the perms for the rezzed (given) object to no copy/no mod.

As far as object modification, yes, any script will alter a prim regardless of permissions. Permissions are for the avatar (agent), not the object itself.

Thanks Johan - exactly the conceptual fix I needed!