Skip to content

feat: Implement RBAC granularity - separate Admin role into Security …#249

Open
boalambo wants to merge 1 commit intoStellarFlow-Network:mainfrom
boalambo:feature/rbac-granularity
Open

feat: Implement RBAC granularity - separate Admin role into Security …#249
boalambo wants to merge 1 commit intoStellarFlow-Network:mainfrom
boalambo:feature/rbac-granularity

Conversation

@boalambo
Copy link
Copy Markdown

…Manager, Fee Collector, and Price Manager

  • Add Role enum with bitmask support (SecurityManager=1, FeeCollector=2, PriceManager=4, SuperAdmin=7)
  • Implement RoleAssignment struct for tracking user permissions
  • Add comprehensive RBAC helper functions (grant, revoke, check roles)
  • Create role-specific authorization decorators
  • Add audit logging for all role changes
  • Update existing functions to use new role-based access control:
    • add_asset() requires Price Manager role
    • Provider management requires Security Manager role
    • Fee management requires Fee Collector role
  • Maintain backward compatibility with legacy admin system
  • Add extensive test coverage for all RBAC functionality
  • Prevent permission creep with clearly defined role boundaries

Resolves #181

…Manager, Fee Collector, and Price Manager

- Add Role enum with bitmask support (SecurityManager=1, FeeCollector=2, PriceManager=4, SuperAdmin=7)
- Implement RoleAssignment struct for tracking user permissions
- Add comprehensive RBAC helper functions (grant, revoke, check roles)
- Create role-specific authorization decorators
- Add audit logging for all role changes
- Update existing functions to use new role-based access control:
  * add_asset() requires Price Manager role
  * Provider management requires Security Manager role
  * Fee management requires Fee Collector role
- Maintain backward compatibility with legacy admin system
- Add extensive test coverage for all RBAC functionality
- Prevent permission creep with clearly defined role boundaries

Resolves StellarFlow-Network#181
@drips-wave
Copy link
Copy Markdown

drips-wave Bot commented Apr 28, 2026

@boalambo Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Contracts | Role-Based Access Control (RBAC) Granularity

1 participant