ITADN

Fix admin check in CreateSecuritization

#2648Opennagarajdivine 创建于 2026-03-18
N
nagarajdivinecommented
<!-- -------------------------------------------------------- Thank you for opening an issue. Before submitting this request please review this template and check for existing duplicate issues first. -------------------------------------------------------- --> ## Summary of Bug Ensure CreateSecuritization only allows admins to update marker permissions. ## Problem Definition CreateSecuritization currently updates marker (pool) permissions without verifying that the signer has admin access. This allows unauthorized users to modify permissions. ## Proposal - Add a validation step in CreateSecuritization to check that the signer has admin role for all involved markers before updating permissions. - Reject the request if the signer is not an admin. - Include unit tests to verify both valid and invalid cases. ## For Admin Use - [ ] Not duplicate issue - [ ] Appropriate labels applied - [ ] Appropriate contributors tagged - [ ] Contributor assigned/self-assigned
0 条评论