Anaminus / roblox-bug-tracker

Formerly an unofficial bug tracker for Roblox.
33 stars 24 forks source link

409 Security errors with loading ROBLOX Crossroads #662

Open green-new opened 9 years ago

green-new commented 9 years ago

I was creating a map which required the rocket launcher, so I decided to export the launcher from the place Crossroads from the user ROBLOX (which I hope we are all familiar with). Before I could though, errors for every BrickBattle tool showed up, a error that says: "httpGet http://www.roblox.com/asset/?id=1014654 failed. Trying again. Error: HTTP 409 (HTTP/1.1 409 User is not authorized to access Asset.). Elapsed time: 0.291108. The LinkedSource name may have changed or been removed." The asset link above is the supposed link to the BrickBattle weapon Rocket Launcher from the script ServerLauncher. All asset links are for their former ones as represented by LinkedSource once opening up Crossroads:

Sword (Script: Local Gui) - http://www.roblox.com/asset/?id=1014476 Sword (Script: SwordScript) - http://www.roblox.com/asset/?id=1014475

Trowel (Script: Local Gui) - http://www.roblox.com/asset/?id=1014610 Trowel (Script: BrickCleanup) - http://www.roblox.com/asset/?id=1014609

SlingShot (Script: PelletScript) - http://www.roblox.com/asset/?id=1014652 SlingShot (Script: Slingshot) - http://www.roblox.com/asset/?id=1014651 SlingShot (Script: Local Gui) - http://www.roblox.com/asset/?id=1014650

TimeBomb (Script: Bomb) - http://www.roblox.com/asset/?id=1014616 TimeBomb (Script: Local Gui) - http://www.roblox.com/asset/?id=1014617 TimeBomb (Script: PlantBomb) - http://www.roblox.com/asset/?id=1014618

Superball (Script: Local Gui) - http://www.roblox.com/asset/?id=1014631

Rocket Launcher (Script: Local Gui) - http://www.roblox.com/asset/?id=1014653 Rocket Launcher (Script: Server Launcher) - http://www.roblox.com/asset/?id=1014654 Rocket Launcher (Script: RocketScript) - http://www.roblox.com/asset/?id=1014655

All of these scripts are not accessible from their LinkedSource URL links or readable. The only three accessible scripts is CannonBall and CannonScript from the Superball weapon, and the script WallMaker from Trowel. These two scripts don't even contain LinkedSource URLs. Also, all of these scripts only have the text written in them: "An error occurred while getting the script - HTTP 409 (HTTP/1.1 409 User is not authorized to access Asset.)"

Once you use the link in a normal web browser (I tried Google Chrome and Internet Explorer) you get the two different identical results: "The page was not displayed because there was a conflict." and "The website is too busy to show the webpage (HTTP 409/408)", respectively.

I tried opening ports 49152 - 65535 on my router but that seemed to not fix the problem with loading the assets. I tried running ROBLOX Studio in Administrator mode but I had another problem with Studio not even opening up afterwards. I had to reinstall Studio.

Obviously the LinkedSource may have been changed or even been removed, but however Crossroads when playing in Multiplayer mode seems to work perfectly fine with loading the items.

My reasoning is behind the possibility of a bug in the new HTTP API once you load ROBLOX Studio, but I am not sure, and keeping it from loading assets properly. This leads to another point that the LinkedSource could not have been either changed or removed. By the looks of it in the Settings... option in the "File" toolbar, I couldn't find a way to use a older version of the HTTP API or not.

One of the main questions however, is that how can Studio not load these assets while playing normally in the place on multiplayer? It seems to me there is a bug in the system, especially since only one of the weapons in the majority do not have a LinkedSource URL (Superball). Neither can you remove the LinkedSource off of the other inaccessible scripts, because it would be a script with no function at all.

SNCPlay42 commented 9 years ago

I believe this is an unfortunate but foreseen side-effect of an intentional change to how LinkedSource works to make it available to developers. Now only the owner of a LinkedSource asset can use it in their games.

einsteinK commented 9 years ago

For security reasons with the new LinkedSource stuff @SNCPlay42 mentioned, Lua assets can only be loaded by the owner (or in the place owned by the owner). If you want to use those scripts, you'll probably have to check the Free Models for copies.

Also, I think there is a section "ROBLOX Sets - Weapons" in the Toolbox that contains a rocket launcher.

green-new commented 9 years ago

Alright, thanks for the heads up einstein and SNC. I haven't played ROBLOX in a long time so I was unaware of these changes to the system.

einsteinK commented 9 years ago

These changes are very recent, less than a month if I recall correctly.

dignatoff commented 9 years ago

We are working on a change (to be released soon) that will make all scripts published under the roblox account public access, which should resolve this issue.

green-new commented 9 years ago

Thank you for the response.

itsrenderman commented 6 years ago

Yeah, Still getting the HTTP 403 (HTTP/1.1 403 Asset is not trusted for this place) error in studio..