Index: /trunk/packages/invirt-web/code/validation.py
===================================================================
--- /trunk/packages/invirt-web/code/validation.py	(revision 2292)
+++ /trunk/packages/invirt-web/code/validation.py	(revision 2293)
@@ -242,4 +242,6 @@
     if owner is None:
         raise InvalidInput('owner', owner, "Owner must be specified")
+    if '@' in owner:
+        raise InvalidInput('owner', owner, "No cross-realm Hesiod lockers allowed")
     try:
         if user not in cache_acls.expandLocker(owner):