@etherisc/gif-next 0.0.2-7c8d286-020 → 0.0.2-7d488b3-675

package/contracts/authorization/AccessAdminLib.sol

@@ -1,183 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-pragma solidity ^0.8.20;
-
-import {AccessManagedUpgradeable} from "@openzeppelin/contracts-upgradeable/access/manager/AccessManagedUpgradeable.sol";
-
-import {IAccess} from "./IAccess.sol";
-import {IAccessAdmin} from "./IAccessAdmin.sol";
-import {IAuthorization} from "./IAuthorization.sol";
-import {IRegistry} from "../registry/IRegistry.sol";
-
-import {ContractLib} from "../shared/ContractLib.sol";
-import {ObjectType} from "../type/ObjectType.sol";
-import {RoleId} from "../type/RoleId.sol";
-import {SelectorLib} from "../type/Selector.sol";
-import {Str, StrLib} from "../type/String.sol";
-import {TimestampLib} from "../type/Timestamp.sol";
-import {VersionPart} from "../type/Version.sol";
-
-
-library AccessAdminLib { // ACCESS_ADMIN_LIB
-
-    function checkRoleCreation(
-        IAccessAdmin accessAdmin,
-        RoleId roleId, 
-        IAccess.RoleInfo memory info
-    )
-        public 
-        view
-    {
-        // check role does not yet exist    // ACCESS_ADMIN_LIB role creation checks
-        if(accessAdmin.roleExists(roleId)) {
-            revert IAccessAdmin.ErrorAccessAdminRoleAlreadyCreated(
-                roleId, 
-                accessAdmin.getRoleInfo(roleId).name.toString());
-        }
-
-        // check admin role exists
-        if(!accessAdmin.roleExists(info.adminRoleId)) {
-            revert IAccessAdmin.ErrorAccessAdminRoleAdminNotExisting(info.adminRoleId);
-        }
-
-        // check role name is not empty
-        if(info.name.length() == 0) {
-            revert IAccessAdmin.ErrorAccessAdminRoleNameEmpty(roleId);
-        }
-
-        // check role name is not used for another role
-        RoleId roleIdForName = accessAdmin.getRoleForName(StrLib.toString(info.name));
-        if(roleIdForName.gtz()) {
-            revert IAccessAdmin.ErrorAccessAdminRoleNameAlreadyExists(
-                roleId, 
-                info.name.toString(),
-                roleIdForName);
-        }
-    }
-
-    function checkTargetCreation(
-        IAccessAdmin accessAdmin,
-        address target, 
-        string memory targetName, 
-        bool checkAuthority
-    )
-        public 
-        view
-    {
-        // check target does not yet exist
-        if(accessAdmin.targetExists(target)) {
-            revert IAccessAdmin.ErrorAccessAdminTargetAlreadyCreated(
-                target, 
-                accessAdmin.getTargetInfo(target).name.toString());
-        }
-
-        // check target name is not empty
-        Str name = StrLib.toStr(targetName);
-        if(name.length() == 0) {
-            revert IAccessAdmin.ErrorAccessAdminTargetNameEmpty(target);
-        }
-
-        // check target name is not used for another target
-        address targetForName = accessAdmin.getTargetForName(name);
-        if(targetForName != address(0)) {
-            revert IAccessAdmin.ErrorAccessAdminTargetNameAlreadyExists(
-                target, 
-                targetName,
-                targetForName);
-        }
-
-        // check target is an access managed contract
-        if (!ContractLib.isAccessManaged(target)) {
-            revert IAccessAdmin.ErrorAccessAdminTargetNotAccessManaged(target);
-        }
-
-        // check target shares authority with this contract
-        if (checkAuthority) {
-            address targetAuthority = AccessManagedUpgradeable(target).authority();
-            if (targetAuthority != accessAdmin.authority()) {
-                revert IAccessAdmin.ErrorAccessAdminTargetAuthorityMismatch(accessAdmin.authority(), targetAuthority);
-            }
-        }
-
-    }
-
-
-    function checkAuthorization( 
-        address authorizationOld,
-        address authorization,
-        ObjectType expectedDomain, 
-        VersionPart expectedRelease,
-        bool checkAlreadyInitialized
-    )
-        public
-        view
-    {
-        // checks
-        // check not yet initialized
-        if (checkAlreadyInitialized && authorizationOld != address(0)) {
-            revert IAccessAdmin.ErrorAccessAdminAlreadyInitialized(authorizationOld);
-        }
-
-        // check contract type matches
-        if (!ContractLib.supportsInterface(authorization, type(IAuthorization).interfaceId)) {  
-            revert IAccessAdmin.ErrorAccessAdminNotAuthorization(authorization);
-        }
-
-        // check domain matches
-        ObjectType domain = IAuthorization(authorization).getDomain();
-        if (domain != expectedDomain) {
-            revert IAccessAdmin.ErrorAccessAdminDomainMismatch(authorization, expectedDomain, domain);
-        }
-
-        // check release matches
-        VersionPart authorizationRelease = IAuthorization(authorization).getRelease();
-        if (authorizationRelease != expectedRelease) {
-            revert IAccessAdmin.ErrorAccessAdminReleaseMismatch(authorization, expectedRelease, authorizationRelease);
-        }
-    }
-
-
-    function checkIsRegistered( 
-        address registry,
-        address target,
-        ObjectType expectedType
-    )
-        public
-        view 
-    {
-        ObjectType tagetType = IRegistry(registry).getObjectInfo(target).objectType;
-        if (tagetType.eqz()) {
-            revert IAccessAdmin.ErrorAccessAdminNotRegistered(target);
-        }
-
-        if (tagetType != expectedType) {
-            revert IAccessAdmin.ErrorAccessAdminTargetTypeMismatch(target, expectedType, tagetType);
-        }
-    }
-
-    function toRole(RoleId adminRoleId, IAccessAdmin.RoleType roleType, uint32 maxMemberCount, string memory name)
-        public 
-        view 
-        returns (IAccess.RoleInfo memory)
-    { 
-        return IAccess.RoleInfo({
-            name: StrLib.toStr(name),
-            adminRoleId: adminRoleId,
-            roleType: roleType,
-            maxMemberCount: maxMemberCount,
-            createdAt: TimestampLib.blockTimestamp(),
-            pausedAt: TimestampLib.max()
-        });
-    }
-
-    function toFunction(bytes4 selector, string memory name) 
-        public 
-        view 
-        returns (IAccess.FunctionInfo memory) 
-    { 
-        return IAccess.FunctionInfo({
-            name: StrLib.toStr(name),
-            selector: SelectorLib.toSelector(selector),
-            createdAt: TimestampLib.blockTimestamp()});
-    }
-
-}

package/contracts/registry/RegistryAuthorization.sol

@@ -1,267 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-pragma solidity ^0.8.20;
-
-import {IAccess} from "../authorization/IAccess.sol";
-import {IRegistry} from "../registry/IRegistry.sol";
-import {IStaking} from "../staking/IStaking.sol";
-
-import {Authorization} from "../authorization/Authorization.sol";
-import {POOL, REGISTRY, STAKING} from "../../contracts/type/ObjectType.sol";
-import {PUBLIC_ROLE} from "../type/RoleId.sol";
-import {ReleaseRegistry} from "./ReleaseRegistry.sol";
-import {RegistryAdmin} from "./RegistryAdmin.sol";
-import {RoleIdLib, ADMIN_ROLE, GIF_ADMIN_ROLE, GIF_MANAGER_ROLE} from "../type/RoleId.sol";
-import {StakingStore} from "../staking/StakingStore.sol";
-import {TokenHandler} from "../shared/TokenHandler.sol";
-import {TokenRegistry} from "../registry/TokenRegistry.sol";
-
-
-contract RegistryAuthorization
-     is Authorization
-{
-
-     /// @dev gif core roles
-     string public constant GIF_ADMIN_ROLE_NAME = "GifAdminRole";
-     string public constant GIF_MANAGER_ROLE_NAME = "GifManagerRole";
-     string public constant RELEASE_REGISTRY_ROLE_NAME = "ReleaseRegistryRole";
-     string public constant STAKING_ROLE_NAME = "StakingRole";
-
-     /// @dev gif roles for external contracts
-     string public constant REGISTRY_SERVICE_ROLE_NAME = "RegistryServiceRole";
-     string public constant COMPONENT_SERVICE_ROLE_NAME = "ComponentServiceRole";
-     string public constant POOL_SERVICE_ROLE_NAME = "PoolServiceRole";
-     string public constant STAKING_SERVICE_ROLE_NAME = "StakingServiceRole";
-
-     /// @dev gif core targets
-     string public constant REGISTRY_ADMIN_TARGET_NAME = "RegistryAdmin";
-     string public constant REGISTRY_TARGET_NAME = "Registry";
-     string public constant RELEASE_REGISTRY_TARGET_NAME = "ReleaseRegistry";
-     string public constant TOKEN_REGISTRY_TARGET_NAME = "TokenRegistry";
-
-     string public constant STAKING_TARGET_NAME = "Staking";
-     string public constant STAKING_TH_TARGET_NAME = "StakingTH";
-     string public constant STAKING_STORE_TARGET_NAME = "StakingStore";
-
-     constructor()
-          Authorization(REGISTRY_TARGET_NAME, REGISTRY(), false, false)
-     { }
-
-     /// @dev Sets up the GIF admin and manager roles.
-     function _setupRoles() internal override {
-
-          // service roles (for all versions)
-          _addRole(
-               RoleIdLib.roleForTypeAndAllVersions(REGISTRY()), 
-               _toRoleInfo({
-                    adminRoleId: ADMIN_ROLE(),
-                    roleType: RoleType.Gif,
-                    maxMemberCount: 999, // max member count = max 
-                    name: REGISTRY_SERVICE_ROLE_NAME}));
-
-          _addRole(
-               RoleIdLib.roleForTypeAndAllVersions(STAKING()), 
-               _toRoleInfo({
-                    adminRoleId: ADMIN_ROLE(),
-                    roleType: RoleType.Gif,
-                    maxMemberCount: 999, // max member count = max 
-                    name: STAKING_SERVICE_ROLE_NAME}));
-
-          _addRole(
-               RoleIdLib.roleForTypeAndAllVersions(POOL()), 
-               _toRoleInfo({
-                    adminRoleId: ADMIN_ROLE(),
-                    roleType: RoleType.Gif,
-                    maxMemberCount: 999, // max member count = max 
-                    name: POOL_SERVICE_ROLE_NAME}));
-
-          // gif admin role
-          _addRole(
-               GIF_ADMIN_ROLE(),
-               _toRoleInfo({
-                    adminRoleId: ADMIN_ROLE(),
-                    roleType: RoleType.Gif,
-                    maxMemberCount: 2, // TODO decide on max member count
-                    name: GIF_ADMIN_ROLE_NAME}));
-
-          // gif manager role
-          _addRole(
-               GIF_MANAGER_ROLE(), 
-               _toRoleInfo({
-                    adminRoleId: ADMIN_ROLE(),
-                    roleType: RoleType.Gif,
-                    maxMemberCount: 1, // TODO decide on max member count
-                    name: GIF_MANAGER_ROLE_NAME}));
-
-     }
-
-     /// @dev Sets up the relevant (non-service) targets for the registry.
-     function _setupTargets() internal override {
-          _addGifContractTarget(REGISTRY_ADMIN_TARGET_NAME);
-          _addGifContractTarget(RELEASE_REGISTRY_TARGET_NAME);
-          _addGifContractTarget(TOKEN_REGISTRY_TARGET_NAME);
-
-          _addGifContractTarget(STAKING_TARGET_NAME);
-          _addGifContractTarget(STAKING_TH_TARGET_NAME);
-          _addTarget(STAKING_STORE_TARGET_NAME);
-     }
-
-
-     function _setupTargetAuthorizations()
-          internal
-          override
-     {
-          // registry
-          _setupRegistryAuthorization();
-          _setupRegistryAdminAuthorization();
-          _setupReleaseRegistryAuthorization();
-          _setupTokenRegistryAuthorization();
-
-          // staking
-          _setupStakingAuthorization();
-          _setupStakingThAuthorization();
-          _setupStakingStoreAuthorization();
-     }
-
-     event LogAccessAdminDebug(string message, string custom, uint256 value);
-
-     function _setupRegistryAuthorization() internal {
-          IAccess.FunctionInfo[] storage functions;
-
-          // gif admin role
-          functions = _authorizeForTarget(REGISTRY_TARGET_NAME, GIF_ADMIN_ROLE());
-          _authorize(functions, IRegistry.registerRegistry.selector, "registerRegistry");
-
-          // registry service role
-          functions = _authorizeForTarget(
-               REGISTRY_TARGET_NAME, 
-               RoleIdLib.roleForTypeAndAllVersions(REGISTRY()));
-
-          _authorize(functions, IRegistry.register.selector, "register");
-          _authorize(functions, IRegistry.registerWithCustomType.selector, "registerWithCustomType");
-          
-          // release registry role
-          functions = _authorizeForTarget(
-               REGISTRY_TARGET_NAME, 
-               getTargetRole(getTarget(RELEASE_REGISTRY_TARGET_NAME)));
-
-          _authorize(functions, IRegistry.registerService.selector, "registerService");
-     }
-
-
-     function _setupRegistryAdminAuthorization() internal {
-          IAccess.FunctionInfo[] storage functions;
-
-          // release registry role
-          functions = _authorizeForTarget(
-               REGISTRY_ADMIN_TARGET_NAME, 
-               getTargetRole(getTarget(RELEASE_REGISTRY_TARGET_NAME)));
-
-          _authorize(functions, RegistryAdmin.grantServiceRoleForAllVersions.selector, "grantServiceRoleForAllVersions");
-     }
-
-
-     function _setupReleaseRegistryAuthorization() internal {
-          IAccess.FunctionInfo[] storage functions;
-
-          functions = _authorizeForTarget(RELEASE_REGISTRY_TARGET_NAME, GIF_ADMIN_ROLE());
-          _authorize(functions, ReleaseRegistry.createNextRelease.selector, "createNextRelease");
-          _authorize(functions, ReleaseRegistry.activateNextRelease.selector, "activateNextRelease");
-          _authorize(functions, ReleaseRegistry.setActive.selector, "setActive");
-
-          functions = _authorizeForTarget(RELEASE_REGISTRY_TARGET_NAME, GIF_MANAGER_ROLE());
-          _authorize(functions, ReleaseRegistry.prepareNextRelease.selector, "prepareNextRelease");
-          _authorize(functions, ReleaseRegistry.registerService.selector, "registerService");
-     }
-
-
-     function _setupTokenRegistryAuthorization() internal {
-          IAccess.FunctionInfo[] storage functions;
-
-          // gif manager role
-          functions = _authorizeForTarget(TOKEN_REGISTRY_TARGET_NAME, GIF_MANAGER_ROLE());
-          _authorize(functions, TokenRegistry.registerToken.selector, "registerToken");
-          _authorize(functions, TokenRegistry.registerRemoteToken.selector, "registerRemoteToken");
-          _authorize(functions, TokenRegistry.setActive.selector, "setActive");
-          _authorize(functions, TokenRegistry.setActiveForVersion.selector, "setActiveForVersion");
-          // TODO find a better way (only needed for testing)
-          _authorize(functions, TokenRegistry.setActiveWithVersionCheck.selector, "setActiveWithVersionCheck");
-     }
-
-
-     function _setupStakingAuthorization() internal {
-          IAccess.FunctionInfo[] storage functions;
-
-          // staking public role
-          functions = _authorizeForTarget(
-               STAKING_TARGET_NAME,
-               PUBLIC_ROLE());
-
-          _authorize(functions, IStaking.approveTokenHandler.selector, "approveTokenHandler");
-
-          // staking service role
-          functions = _authorizeForTarget(
-               STAKING_TARGET_NAME, 
-               RoleIdLib.roleForTypeAndAllVersions(STAKING()));
-
-          _authorize(functions, IStaking.registerTarget.selector, "registerTarget");
-          _authorize(functions, IStaking.setLockingPeriod.selector, "setLockingPeriod");
-          _authorize(functions, IStaking.setRewardRate.selector, "setRewardRate");
-          _authorize(functions, IStaking.setMaxStakedAmount.selector, "setMaxStakedAmount");
-          _authorize(functions, IStaking.refillRewardReserves.selector, "refillRewardReserves");
-          _authorize(functions, IStaking.withdrawRewardReserves.selector, "withdrawRewardReserves");
-          _authorize(functions, IStaking.createStake.selector, "createStake");
-          _authorize(functions, IStaking.stake.selector, "stake");
-          _authorize(functions, IStaking.unstake.selector, "unstake");
-          _authorize(functions, IStaking.restake.selector, "restake");
-          _authorize(functions, IStaking.updateRewards.selector, "updateRewards");
-          _authorize(functions, IStaking.claimRewards.selector, "claimRewards");
-
-          // pool service role
-          functions = _authorizeForTarget(
-               STAKING_TARGET_NAME, 
-               RoleIdLib.roleForTypeAndAllVersions(POOL()));
-
-          _authorize(functions, IStaking.increaseTotalValueLocked.selector, "increaseTotalValueLocked");
-          _authorize(functions, IStaking.decreaseTotalValueLocked.selector, "decreaseTotalValueLocked");
-     }
-
-
-     function _setupStakingThAuthorization() internal {
-          IAccess.FunctionInfo[] storage functions;
-
-          // staking service role
-          functions = _authorizeForTarget(
-               STAKING_TH_TARGET_NAME,
-               RoleIdLib.roleForTypeAndAllVersions(STAKING()));
-
-          _authorize(functions, TokenHandler.approve.selector, "approve");
-          _authorize(functions, TokenHandler.pullToken.selector, "pullToken");
-          _authorize(functions, TokenHandler.pushToken.selector, "pushToken");
-     }
-
-
-     function _setupStakingStoreAuthorization() internal {
-          IAccess.FunctionInfo[] storage functions;
-
-          // release registry role
-          functions = _authorizeForTarget(
-               STAKING_STORE_TARGET_NAME, 
-               getTargetRole(getTarget(STAKING_TARGET_NAME)));
-
-          _authorize(functions, StakingStore.setStakingRate.selector, "setStakingRate");
-          _authorize(functions, StakingStore.createTarget.selector, "createTarget");
-          _authorize(functions, StakingStore.updateTarget.selector, "updateTarget");
-          _authorize(functions, StakingStore.increaseReserves.selector, "increaseReserves");
-          _authorize(functions, StakingStore.decreaseReserves.selector, "decreaseReserves");
-          _authorize(functions, StakingStore.increaseTotalValueLocked.selector, "increaseTotalValueLocked");
-          _authorize(functions, StakingStore.decreaseTotalValueLocked.selector, "decreaseTotalValueLocked");
-          _authorize(functions, StakingStore.create.selector, "create");
-          _authorize(functions, StakingStore.update.selector, "update");
-          _authorize(functions, StakingStore.increaseStake.selector, "increaseStake");
-          _authorize(functions, StakingStore.restakeRewards.selector, "restakeRewards");
-          _authorize(functions, StakingStore.updateRewards.selector, "updateRewards");
-          _authorize(functions, StakingStore.claimUpTo.selector, "claimUpTo");
-          _authorize(functions, StakingStore.unstakeUpTo.selector, "unstakeUpTo");
-     }
-}
-