Skip to content
Merged
Changes from 1 commit
Commits
Show all changes
79 commits
Select commit Hold shift + click to select a range
1327b8f
add AccessManager.sol
frangio Mar 1, 2023
b54b922
docs
frangio Mar 1, 2023
5a0fd33
enforce team existence
frangio Mar 1, 2023
ee5de96
remove on-chain enumerability
frangio Mar 15, 2023
6284768
add Authority interface
frangio Mar 15, 2023
bce3641
remove redundancy
frangio Mar 15, 2023
223e6af
simplify and complete features
frangio Mar 16, 2023
eafb571
split in separate files
frangio Mar 16, 2023
24af159
write AccessManager docs
frangio Mar 16, 2023
833f219
add docs for AccessManagerAdapter
frangio Mar 16, 2023
0f27739
add to docs site
frangio Mar 16, 2023
2ac5aa1
docs for IAuthority
frangio Mar 16, 2023
f26c4d3
lint
frangio Mar 16, 2023
63f9393
add initial AccessManaged docs
frangio Mar 16, 2023
6fecd25
typos
frangio Mar 16, 2023
589b5b1
Update contracts/access/manager/AccessManager.sol
frangio Mar 16, 2023
619cc73
fix docs
frangio Mar 16, 2023
1b681a5
rename team "all" -> "public"
frangio Mar 16, 2023
48b31c0
ad hoc selector batching
frangio Mar 16, 2023
b078157
whitespace
frangio Mar 17, 2023
274c04d
add docs on team number choice
frangio Mar 17, 2023
082b05c
add missing function argument
frangio Mar 17, 2023
52f27c8
fix team role decoding
frangio Mar 17, 2023
1285c49
add ungrouped interface
frangio Mar 17, 2023
5c7472a
improve docs
frangio Mar 17, 2023
3cc1e73
remove todo
frangio Mar 17, 2023
ae3482d
add initial tests for teams
frangio Mar 19, 2023
535ea13
rename team -> badge
frangio Mar 19, 2023
68bb5fa
improve testing
frangio Mar 19, 2023
fa58ec5
Update contracts/access/manager/AccessManager.sol
frangio Mar 19, 2023
6d76058
use mapping labels from solidity 0.8.18
frangio Mar 20, 2023
3447438
add AccessManaged tests
frangio Mar 20, 2023
1d10639
fix group encoding
frangio Mar 20, 2023
d875a7b
add test for allowing
frangio Mar 20, 2023
d517d27
lint
frangio Mar 20, 2023
6d33cda
add changeset
frangio Mar 20, 2023
9ed1aef
lint
frangio Mar 20, 2023
6adc0d8
fix mock
frangio Mar 21, 2023
0624794
remove contract groups
frangio Mar 21, 2023
17ec3b6
add transferContractAuthority
frangio Mar 21, 2023
f9210c5
lint
frangio Mar 21, 2023
a54cd10
rename badge -> group
frangio Mar 21, 2023
8af9ca4
change test name
frangio Mar 21, 2023
2a05bcc
add setContractModeCustom and tests
frangio Mar 21, 2023
5f22f2d
remove use of mapping labels
frangio Mar 21, 2023
6a9fbed
Merge branch 'master' into accessmanager
frangio Mar 22, 2023
0580198
tweak comments
frangio Mar 22, 2023
e01e362
add tests for adapter
frangio Mar 22, 2023
cb026bc
lint
frangio Mar 22, 2023
76d35da
add revert reasons and group tests
frangio Mar 22, 2023
4069781
add tests for allowing and disallowing roles
frangio Mar 22, 2023
80ffd2a
lint
frangio Mar 22, 2023
3094d0c
add docs for AccessManaged
frangio Mar 22, 2023
b3a8b1b
Update contracts/access/manager/AccessManager.sol
frangio Mar 22, 2023
8a68322
Update contracts/access/manager/AccessManager.sol
frangio Mar 22, 2023
eeab8cf
Update contracts/access/manager/AccessManager.sol
frangio Mar 22, 2023
ca61e38
add tests for onlyDefaultAdmin
frangio Mar 22, 2023
8824c31
lint
frangio Mar 22, 2023
67e33b6
add internal _setContractMode
frangio Mar 22, 2023
5f270c7
Update .changeset/quiet-trainers-kick.md
frangio Mar 22, 2023
6f7ac96
Update contracts/access/manager/AccessManager.sol
frangio Mar 22, 2023
7ec5311
Update contracts/access/manager/AccessManager.sol
frangio Mar 22, 2023
82402d2
typo
frangio Mar 22, 2023
27807e6
Apply suggestions from code review
frangio Mar 22, 2023
80bc88b
roll back to 0.8.13
frangio Mar 22, 2023
cf4df22
add test for setFunctionAllowedGroup events
frangio Mar 22, 2023
bab4d34
remove mode restriction on setFunctionAllowedGroup
frangio Mar 22, 2023
642e279
simplify use of setFunctionAllowedGroup
frangio Mar 22, 2023
51aff23
lint
frangio Mar 22, 2023
6e3da66
remove unused import
frangio Mar 22, 2023
6b56c8f
remove onlyDefaultAdmin modifier
frangio Mar 22, 2023
b7e3b3f
lint
frangio Mar 22, 2023
8200986
use return value names for _decodeGroupRole
frangio Mar 22, 2023
18e53e2
rename RestrictedMode -> AccessMode
frangio Mar 22, 2023
f94a881
use Context._msgSender
frangio Mar 22, 2023
cd8babd
reorder arguments to grant/revoke/renounceGroup
frangio Mar 22, 2023
597edc0
add IAccessControlDefaultAdminRules
frangio Mar 22, 2023
ee560d0
Apply suggestions from code review
frangio Mar 22, 2023
33f5ace
Fix expected event parameter name in tests
ernestognw Mar 22, 2023
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
remove on-chain enumerability
  • Loading branch information
frangio committed Mar 15, 2023
commit ee5de96bac7495bd6b18a183cf32c7ec4038b5a4
65 changes: 17 additions & 48 deletions contracts/access/AccessManager.sol
Original file line number Diff line number Diff line change
Expand Up @@ -33,8 +33,6 @@ interface IAccessManager {

function updateTeam(uint8 team, string calldata name) external;

function getTeamName(uint8 team) external view returns (string calldata name);

// The result is a bit mask.
function getUserTeams(address user) external view returns (bytes32 teams);

Expand All @@ -56,20 +54,10 @@ interface IAccessManager {
function setContractGroupAdmin(bytes32 group, bytes32 adminRole) external;

function setRoleAdmin(bytes32 role, bytes32 adminRole) external;

struct EnumeratedTeam {
uint8 id;
string name;
}

/// Decodes a bit mask into array of team ids and names.
/// Meant for user interface purposes.
/// Can be used with the outputs of `getUserTeams` and `getFunctionAllowedTeams`.
function enumerateTeams(bytes32 teams) external view returns (EnumeratedTeam[] memory);
}

contract AccessManager is IAccessManager, AccessControl /*, AccessControlDefaultAdminRules */ {
mapping (uint8 => string) private _teamName;
bytes32 _createdTeams;
mapping (address => bytes32) private _userTeams;
mapping (bytes32 => mapping (bytes4 => bytes32)) private _allowedTeams;
mapping (address => bytes32) private _contractGroup;
Expand All @@ -88,26 +76,16 @@ contract AccessManager is IAccessManager, AccessControl /*, AccessControlDefault

function createTeam(uint8 team, string calldata name) public virtual onlyDefaultAdmin {
require(!_teamExists(team));
_updateTeam(team, name);
emit TeamUpdated(team, name);
}

function updateTeam(uint8 team, string calldata name) public virtual onlyDefaultAdmin {
require(_teamExists(team));
_updateTeam(team, name);
}

function _updateTeam(uint8 team, string calldata name) internal virtual {
require(_teamExists(team));
_teamName[team] = name;
emit TeamUpdated(team, name);
}

function _teamExists(uint8 team) internal virtual returns (bool) {
return bytes(_teamName[team]).length > 0;
}

function getTeamName(uint8 team) public view virtual returns (string memory) {
return _teamName[team];
return _getBit(_createdTeams, team);
}

function getUserTeams(address user) public view virtual returns (bytes32) {
Expand All @@ -119,8 +97,7 @@ contract AccessManager is IAccessManager, AccessControl /*, AccessControlDefault
(bool isTeam, uint8 team) = _parseTeamRole(role);
if (isTeam) {
require(_teamExists(team));
bytes32 mask = bytes32(1 << team);
_userTeams[user] |= mask;
_userTeams[user] = _setBit(_userTeams[user], team, true);
}
}

Expand All @@ -129,8 +106,7 @@ contract AccessManager is IAccessManager, AccessControl /*, AccessControlDefault
(bool isTeam, uint8 team) = _parseTeamRole(role);
if (isTeam) {
require(_teamExists(team));
bytes32 mask = bytes32(1 << team);
_userTeams[user] &= ~mask;
_userTeams[user] = _setBit(_userTeams[user], team, false);
}
}

Expand All @@ -145,13 +121,11 @@ contract AccessManager is IAccessManager, AccessControl /*, AccessControlDefault
}

function addFunctionAllowedTeam(bytes32 group, bytes4 selector, uint8 team) public virtual onlyDefaultAdmin {
bytes32 mask = bytes32(1 << uint8(team));
_allowedTeams[group][selector] |= mask;
_allowedTeams[group][selector] = _setBit(_allowedTeams[group][selector], team, true);
}

function removeFunctionAllowedTeam(bytes32 group, bytes4 selector, uint8 team) public virtual onlyDefaultAdmin {
bytes32 mask = bytes32(1 << uint8(team));
_allowedTeams[group][selector] &= ~mask;
_allowedTeams[group][selector] = _setBit(_allowedTeams[group][selector], team, false);
}

function getContractGroup(address target) public view virtual returns (bytes32) {
Expand Down Expand Up @@ -191,22 +165,17 @@ contract AccessManager is IAccessManager, AccessControl /*, AccessControlDefault
_setRoleAdmin(role, adminRole);
}

function enumerateTeams(bytes32 roles) public view virtual returns (EnumeratedTeam[] memory) {
EnumeratedTeam[] memory roleList = new EnumeratedTeam[](256);

uint nextPos = 0;
function _getBit(bytes32 bitmap, uint8 pos) private pure returns (bool) {
bytes32 mask = bytes32(1 << pos);
return bitmap & mask > 0;
}

for (uint256 id = 0; id < 256; id += 1) {
bytes32 mask = bytes32(1 << id);
if (roles & mask != 0) {
roleList[nextPos].id = uint8(id);
roleList[nextPos].name = getTeamName(uint8(id));
nextPos += 1;
}
function _setBit(bytes32 bitmap, uint8 pos, bool val) private pure returns (bytes32) {
bytes32 mask = bytes32(1 << pos);
if (val) {
return bitmap | mask;
} else {
return bitmap & ~mask;
}

// todo: shrink array to length = nextPos and reset free pointer, if safe to do so

return roleList;
}
}