Add constraint to profile_authority_add
to make sure it's a verified identity
#54
Labels
enhancement
New feature or request
Currently, the
profile_authority_add
does not verify if an authority actually exists and is owned by the profile owner. They can literally add any valid Solana Public Key.To fix this, the
profile_authority_add
should have a constraint or check that makes sure that thenew_authority
argument that is passed in exists in theprofile.signers
array and is verified by the community that's passed in as thecommunity
account on theprofile_authority_add
.This will ensure that the user has access to the wallets they want to add as an
authority
.The text was updated successfully, but these errors were encountered: