Deeded objects to group presents security risk?

Does anyone know a way to find out the name of the avatar who placed an object that was later deeded to a group?

I know that it's recorded somewhere, because if you return said objects it is returned to the person that placed the object (isn't it?). llDetectedOwner() and llGetObjectDetails() both return NULL_KEY for owner if they are owned by a group. This is a security issue if group members might place malicious scripts and hide them by deeding the containing objects to group.

You can use llGetCreator() I suppose, but that could be defeated by placing a script into a transferrable object.

On a similar note, is it possible to retrieve a group name from its key?

A patched viewer can show you this, Emerald is an easy-to-find one. In that viewer, it will show up in the edit window as the last owner.



Yeah, you can get this from the web, http://world.secondlife.com/group/UUID_GOES_HERE - in a script, you can try to extract it from the title tag.

Thanks for the helpful workarounds (especially the looking up of the name).

The first one I still see as a security problem. I am posting this is the scripting section because, even though as you say I could manually look it up using Emerald, I would like to automate the process. It irks me that people could hide malicious scripts in deeded objects and I don't have any detection methods for that available to me in LSL.

This looks like it wants your vote, then!
http://jira.secondlife.com/browse/VWR-16351

Yes that would be great! Or just llGetDeededOwner(key object).

Isn't deeding a role priv? Is there a reason to allow everybody to have it, Dr?

I don't think LL is going to touch group stuff until they rewrite the whole mess. I also don't see this happening soon, despite the fairly desperate need.

It is, and in my experience traveling around with TSMGO! performing, and needing to set up the audio changer, it isn't something given out to many in the group - the abilty to delete such objects is another closely-guarded ability.