Disabling an experience

[Dolphin Linden]

Let's say, hypothetically, you end up with a rogue contributor who makes a bunch of abusive scripts for your experience.  Is there any way to do damage control for something like that?  Or once those scripts are out are you doomed and you need to reset your experience?

[Dolphin Linden]

Currently, the only action you can take is you disable the Experience (the setting is available on the profile editing page). This can be used for shutting down the Experience temporarily for damage control or other reasons, but there isn't any way to find or get rid of bad scripts after they are out there.

[Lucia Nightfire]

Governance is capable of blacklisting any scripts.

Since experiences are compiled components of scripts, maybe SOP's could be revised to allow governance to honor requests from experience owners to blacklist a script in the rare event of abuse from third parties.

This would be favorable especially if the creator already has an entire product line devoted to the experience or a significant amount of user data assigned to the associated database or if the experience has quite a following of users as well.

Without this option, there would be no temporary damage control with the rare event of bugs, exploits or rouge contributors as the risk would always be present if the scripts were still available and/or active.

[Cron Stardust]

A work-around for all cases other than a rogue contributor is to add a blacklist version check in the KV store: if the script finds its version number in the value of the blacklist it either shuts off, removes itself from inventory, deletes the object, or tries to update - whatever the application demands.

[Frans Charming]

A rogue scripter wouldn't even do a version check though. But it's a great way to get rid of outdated versions.

[Cron Stardust]

Correct - my solution was for all other cases than a rogue contributor - a rogue contributor can be solved by making sure you only add people you know you will be able to implicitly trust for the lifetime of the Experience.  But that's not a technological solution, only an interpersonal one.

A tech fix for a rogue contrib would require facilities for being able to blacklist Experience scripts created by a specific account.  To prevent accidents and further abuse, the given account would have to have been removed from the Experience.  However, the workaround for the rogue would be to have other, not as script savvy, members of the Experience copy & paste code into new scripts.  So the tech fix still requires an interpersonal fix.

[Lucia Nightfire]

My definitive solution to the problem was filed at https://jira.secondlife.com/browse/BUG-7941

Comments welcome.

[Cron Stardust]

So commented!