[BUG-139332] PRIM_MEDIA_PERMS_INTERACT Ignores settings and behaves as PRIM_MEDIA_PERM_ANYONE

[sl-service-account]

Steps to Reproduce

I've been attempting to script a kiosk system limited to group. I discovered this bug when I noticed that I and others could still access the webpage and interact with it despite not being set to the same group as the prim.

Actual Behavior

llSetLinkMedia(LINK_THIS,1,[ PRIM_MEDIA_AUTO_PLAY,TRUE, PRIM_MEDIA_AUTO_LOOP,TRUE, PRIM_MEDIA_FIRST_CLICK_INTERACT,TRUE, PRIM_MEDIA_CURRENT_URL,"www.google.com", PRIM_MEDIA_HOME_URL,"www.google.com", PRIM_MEDIA_HEIGHT_PIXELS,512, PRIM_MEDIA_WIDTH_PIXELS,512, PRIM_MEDIA_ALT_IMAGE_ENABLE,TRUE, PRIM_MEDIA_PERMS_CONTROL,PRIM_MEDIA_PERM_NONE, PRIM_MEDIA_PERMS_INTERACT,PRIM_MEDIA_PERM_OWNER ]);

The script above still allows non-owners to interact with the displayed site regardless of permissions. It also ignores permissions settings for PRIM_MEDIA_PERM_GROUP and allows anyone to interact with it.

Expected Behavior

I was expecting that the prim would not allow anyone but those associated with the group to interact with the webpage.

Other information

Original Jira Fields

| Field | Value | | ------------- | ------------- | | Issue | BUG-139332 | | Summary | PRIM_MEDIA_PERMS_INTERACT Ignores settings and behaves as PRIM_MEDIA_PERM_ANYONE | | Type | Bug | | Priority | Unset | | Status | Accepted | | Resolution | Accepted | | Reporter | tyrelles (tyrelles) | | Created at | 2017-11-03T01:18:48Z | | Updated at | 2017-11-16T21:27:41Z | ``` { 'Business Unit': ['Platform'], 'Date of First Response': '2017-11-04T11:24:21.573-0500', 'ReOpened Count': 0.0, 'Severity': 'Unset', 'System': 'SL Simulator', 'Target Viewer Version': 'viewer-development', 'What just happened?': 'llSetLinkMedia(LINK_THIS,1,[\r\n PRIM_MEDIA_AUTO_PLAY,TRUE,\r\n PRIM_MEDIA_AUTO_LOOP,TRUE,\r\n PRIM_MEDIA_FIRST_CLICK_INTERACT,TRUE,\r\n PRIM_MEDIA_CURRENT_URL,"www.google.com",\r\n PRIM_MEDIA_HOME_URL,"www.google.com",\r\n PRIM_MEDIA_HEIGHT_PIXELS,512,\r\n PRIM_MEDIA_WIDTH_PIXELS,512,\r\n PRIM_MEDIA_ALT_IMAGE_ENABLE,TRUE,\r\n PRIM_MEDIA_PERMS_CONTROL,PRIM_MEDIA_PERM_NONE,\r\n PRIM_MEDIA_PERMS_INTERACT,PRIM_MEDIA_PERM_OWNER\r\n ]);\r\n\r\nThe script above still allows non-owners to interact with the displayed site regardless of permissions. It also ignores permissions settings for PRIM_MEDIA_PERM_GROUP and allows anyone to interact with it.', 'What were you doing when it happened?': "I've been attempting to script a kiosk system limited to group. I discovered this bug when I noticed that I and others could still access the webpage and interact with it despite not being set to the same group as the prim.", 'What were you expecting to happen instead?': 'I was expecting that the prim would not allow anyone but those associated with the group to interact with the webpage.', } ```

[sl-service-account]

Whirly Fizzle commented at 2017-11-04T16:24:22Z

Hmm I can't reproduce this. Tested at http://maps.secondlife.com/secondlife/Magnum%20Sandbox%203/183/67/23 Second Life Server 17.10.06.509394

[sl-service-account]

tyrelles commented at 2017-11-04T17:54:38Z

What viewer were you using to test? I should have included that info as well. I've been using Firestorm, and I'm starting to wonder if that's the cause. I'll see if I can test it using the normal viewer later today, and I'll test my script at the location you mentioned.

[sl-service-account]

Whirly Fizzle commented at 2017-11-04T20:25:31Z

I tested with Firestorm and Second Life 5.0.8.329115 (Second Life Release) (current LL default release from https://secondlife.com/support/downloads/).

[sl-service-account]

Mazidox Linden commented at 2017-11-09T21:32:11Z

Hi there tyrelles,

Could you please provide a (stripped down, if you like) version of the vendor that exhibits this behavior to Mazidox Linden in-world? It would make checking for any potential permissions issue much quicker. Please provide the vendor in-world and then press the Info Provided button above.

[sl-service-account]

tyrelles commented at 2017-11-11T03:34:24Z

Sending the test vendor as requested. It uses a script to display a javascript prompt. Currently, regardless of it being set to interact only with those of the same group, anyone can interact with it. I've had this confirmed with others who even went so far as to relog on their systems and changing groups, even removing themselves from the group the prim was set to. (Sent in-world)

[sl-service-account]

Mazidox Linden commented at 2017-11-13T19:04:05Z

I'm going to go ahead and test this on Aditi when I get a moment tyrelles. Thanks for your patience!