Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add constraint to profile_authority_add to make sure it's a verified identity #54

Open
beeman opened this issue Oct 23, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@beeman
Copy link
Contributor

beeman commented Oct 23, 2024

Currently, the profile_authority_add does not verify if an authority actually exists and is owned by the profile owner. They can literally add any valid Solana Public Key.

To fix this, the profile_authority_add should have a constraint or check that makes sure that the new_authority argument that is passed in exists in the profile.signers array and is verified by the community that's passed in as the community account on the profile_authority_add.

This will ensure that the user has access to the wallets they want to add as an authority.

@beeman beeman added the enhancement New feature or request label Oct 23, 2024
@beeman beeman changed the title Add constraint to profile_authority_add to make sure it's a verified identity Add constraint to profile_authority_add to make sure it's a verified identity Oct 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant