Fix admin check in CreateSecuritization
<!-- --------------------------------------------------------
Thank you for opening an issue.
Before submitting this request please review this template
and check for existing duplicate issues first.
-------------------------------------------------------- -->
## Summary of Bug
Ensure CreateSecuritization only allows admins to update marker permissions.
## Problem Definition
CreateSecuritization currently updates marker (pool) permissions without verifying that the signer has admin access. This allows unauthorized users to modify permissions.
## Proposal
- Add a validation step in CreateSecuritization to check that the signer has admin role for all involved markers before updating permissions.
- Reject the request if the signer is not an admin.
- Include unit tests to verify both valid and invalid cases.
## For Admin Use
- [ ] Not duplicate issue
- [ ] Appropriate labels applied
- [ ] Appropriate contributors tagged
- [ ] Contributor assigned/self-assigned
0 条评论