contracts icon indicating copy to clipboard operation
contracts copied to clipboard

[Audit] Feature/Authorizer-Update

Open FHieser opened this issue 8 months ago • 0 comments

This is the audit feature branch for the Authorizer Update. The following contracts are the main focus points of the Audit and contain internal refactors and central logic changes that impact other contracts. I recommend going from top to bottom through the contracts to understand the changes:

Module:

  • src/modules/base/Module_v1.sol

Removing all ModuleRole Modifiers and grantRole functions and replace them with permissioned modifier.

Orchestrator

  • src/orchestrator/Orchestrator_v1

Adapt to also use permissioned functionality.

AUT_Roles:

  • src/modules/authorizer/role/AUT_Roles_v1.sol

Removing the hashed Role id setup and replacing it with a straight up counter system Adding a flexible function permission system, where function restrictions can be adapted on a individual basis

AUT_TokenGated_Roles

  • src/modules/authorizer/role/AUT_TokenGated_Roles.sol

Adapt to new base Contract and refactor to keep up with the inverter-standard


The permission system change lead to adaptions in different modules especially the predefined roles. The following folders should be examined for their authorization logic and the introduced changes. They can be looked at in any order, as they should work independent from each other:

PaymentProcessor

  • src/module/paymentProcessor

Contains the least amount of changed contracts.

FundingManager

  • src/module/fundingManager

LogicModules

  • src/module/logicModule

FHieser avatar May 20 '25 13:05 FHieser