@etherisc/gif-next 0.0.2-7ca6cd9-950 → 0.0.2-7dc3cd3-858

package/contracts/instance/InstanceAuthorizationsLib.sol

@@ -1,377 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-pragma solidity ^0.8.20;
-
-import {ADMIN_ROLE, INSTANCE_OWNER_ROLE, ORACLE_SERVICE_ROLE, DISTRIBUTION_OWNER_ROLE, POOL_OWNER_ROLE, PRODUCT_OWNER_ROLE, ORACLE_OWNER_ROLE, INSTANCE_SERVICE_ROLE, COMPONENT_SERVICE_ROLE, DISTRIBUTION_SERVICE_ROLE, POOL_SERVICE_ROLE, PRODUCT_SERVICE_ROLE, APPLICATION_SERVICE_ROLE, POLICY_SERVICE_ROLE, CLAIM_SERVICE_ROLE, BUNDLE_SERVICE_ROLE, INSTANCE_ROLE} from "../type/RoleId.sol";
-import {APPLICATION, BUNDLE, CLAIM, COMPONENT, DISTRIBUTION, INSTANCE, ORACLE, POLICY, POOL, PRODUCT, REGISTRY} from "../type/ObjectType.sol";
-import {VersionPart} from "../type/Version.sol";
-
-import {IRegistry} from "../registry/IRegistry.sol";
-
-import {Instance} from "./Instance.sol";
-import {InstanceAdmin} from "./InstanceAdmin.sol";
-import {InstanceReader} from "./InstanceReader.sol";
-import {BundleManager} from "./BundleManager.sol";
-import {AccessManagerExtendedInitializeable} from "../shared/AccessManagerExtendedInitializeable.sol";
-import {InstanceStore} from "./InstanceStore.sol";
-
-
-library InstanceAuthorizationsLib
-{
-    function grantInitialAuthorizations(
-        AccessManagerExtendedInitializeable accessManager,
-        InstanceAdmin instanceAdmin,
-        Instance instance,
-        BundleManager bundleManager,
-        InstanceStore instanceStore,
-        address instanceOwner,
-        IRegistry registry,
-        VersionPart majorVersion)
-            external
-    {
-        _createRoles(instanceAdmin);
-        _createTargets(instanceAdmin, instance, bundleManager, instanceStore);
-        _grantComponentServiceAuthorizations(accessManager, instanceAdmin, instanceStore, registry, majorVersion);
-        _grantOracleServiceAuthorizations(accessManager, instanceAdmin, instanceStore, registry, majorVersion);
-        _grantDistributionServiceAuthorizations(accessManager, instanceAdmin, instanceStore, registry, majorVersion);
-        _grantPoolServiceAuthorizations(accessManager, instanceAdmin, instanceStore, registry, majorVersion);
-        _grantProductServiceAuthorizations(accessManager, instanceAdmin, instanceStore, registry, majorVersion);
-        _grantApplicationServiceAuthorizations(accessManager, instanceAdmin, instanceStore, registry, majorVersion);
-        _grantPolicyServiceAuthorizations(accessManager, instanceAdmin, instanceStore, registry, majorVersion);
-        _grantClaimServiceAuthorizations(accessManager, instanceAdmin, instanceStore, registry, majorVersion);
-        _grantBundleServiceAuthorizations(accessManager, instanceAdmin, instanceStore, bundleManager, registry, majorVersion);
-        _grantInstanceServiceAuthorizations(accessManager, instanceAdmin, instance, registry, majorVersion);
-        _grantInstanceAuthorizations(accessManager, instanceAdmin, instance, registry, majorVersion);
-        _grantInstanceOwnerAuthorizations(instanceAdmin, instance, registry, majorVersion);
-    }
-
-    function _createRoles(InstanceAdmin instanceAdmin) private {
-        // default roles controlled by ADMIN_ROLE -> core roles
-        // all set/granted only once during cloning (the only exception is INSTANCE_OWNER_ROLE, hooked to instance nft)
-        instanceAdmin.createCoreRole(INSTANCE_SERVICE_ROLE(), "InstanceServiceRole");
-        instanceAdmin.createCoreRole(COMPONENT_SERVICE_ROLE(), "ComponentServiceRole");
-        instanceAdmin.createCoreRole(DISTRIBUTION_SERVICE_ROLE(), "DistributionServiceRole");
-        instanceAdmin.createCoreRole(ORACLE_SERVICE_ROLE(), "OracleServiceRole");
-        instanceAdmin.createCoreRole(POOL_SERVICE_ROLE(), "PoolServiceRole");
-        instanceAdmin.createCoreRole(APPLICATION_SERVICE_ROLE(), "ApplicationServiceRole");
-        instanceAdmin.createCoreRole(PRODUCT_SERVICE_ROLE(), "ProductServiceRole");
-        instanceAdmin.createCoreRole(CLAIM_SERVICE_ROLE(), "ClaimServiceRole");
-        instanceAdmin.createCoreRole(POLICY_SERVICE_ROLE(), "PolicyServiceRole");
-        instanceAdmin.createCoreRole(BUNDLE_SERVICE_ROLE(), "BundleServiceRole");
-
-        // default roles controlled by INSTANCE_OWNER_ROLE -> gif roles
-        instanceAdmin.createGifRole(DISTRIBUTION_OWNER_ROLE(), "DistributionOwnerRole", INSTANCE_OWNER_ROLE());
-        instanceAdmin.createGifRole(ORACLE_OWNER_ROLE(), "OracleOwnerRole", INSTANCE_OWNER_ROLE());
-        instanceAdmin.createGifRole(POOL_OWNER_ROLE(), "PoolOwnerRole", INSTANCE_OWNER_ROLE());
-        instanceAdmin.createGifRole(PRODUCT_OWNER_ROLE(), "ProductOwnerRole", INSTANCE_OWNER_ROLE());
-    }
-
-    function _createTargets(
-        InstanceAdmin instanceAdmin,
-        Instance instance,
-        BundleManager bundleManager,
-        InstanceStore instanceStore)
-        private
-    {
-        instanceAdmin.createCoreTarget(address(instance), "Instance");
-        //instanceAdmin.createCoreTarget(address(instanceAdmin), "InstanceAdmin");
-        instanceAdmin.createCoreTarget(address(bundleManager), "BundleManager");
-        instanceAdmin.createCoreTarget(address(instanceStore), "InstanceStore");
-    }
-
-    function _grantComponentServiceAuthorizations(
-        AccessManagerExtendedInitializeable accessManager,
-        InstanceAdmin instanceAdmin,
-        InstanceStore instanceStore,
-        IRegistry registry,
-        VersionPart majorVersion)
-        private
-    {
-        // configure authorization for component service on instance store
-        address componentServiceAddress = registry.getServiceAddress(COMPONENT(), majorVersion);
-        accessManager.grantRole(COMPONENT_SERVICE_ROLE().toInt(), componentServiceAddress, 0);
-
-        bytes4[] memory serviceSelectors = new bytes4[](8);
-        serviceSelectors[0] = instanceStore.createComponent.selector;
-        serviceSelectors[1] = instanceStore.updateComponent.selector;
-        serviceSelectors[2] = instanceStore.createPool.selector;
-        serviceSelectors[3] = instanceStore.createProduct.selector;
-        serviceSelectors[5] = instanceStore.updateProduct.selector;
-        serviceSelectors[6] = instanceStore.increaseBalance.selector;
-        serviceSelectors[7] = instanceStore.increaseFees.selector;
-
-        instanceAdmin.setTargetFunctionRoleByService(
-            "InstanceStore",
-            serviceSelectors,
-            COMPONENT_SERVICE_ROLE());
-    }
-
-    function _grantOracleServiceAuthorizations(
-        AccessManagerExtendedInitializeable accessManager,
-        InstanceAdmin instanceAdmin,
-        InstanceStore instanceStore,
-        IRegistry registry,
-        VersionPart majorVersion
-    )
-        private
-    {
-        // configure authorization for distribution service on instance
-        address oracleServiceAddress = registry.getServiceAddress(ORACLE(), majorVersion);
-        accessManager.grantRole(ORACLE_SERVICE_ROLE().toInt(), oracleServiceAddress, 0);
-
-        bytes4[] memory instanceOracleServiceSelectors = new bytes4[](3);
-        instanceOracleServiceSelectors[0] = instanceStore.createRequest.selector;
-        instanceOracleServiceSelectors[1] = instanceStore.updateRequest.selector;
-        instanceOracleServiceSelectors[2] = instanceStore.updateRequestState.selector;
-
-        instanceAdmin.setTargetFunctionRoleByService(
-            "InstanceStore",
-            instanceOracleServiceSelectors,
-            ORACLE_SERVICE_ROLE());
-    }
-
-    function _grantDistributionServiceAuthorizations(
-        AccessManagerExtendedInitializeable accessManager,
-        InstanceAdmin instanceAdmin,
-        InstanceStore instanceStore,
-        IRegistry registry,
-        VersionPart majorVersion
-    )
-        private
-    {
-        // configure authorization for distribution service on instance
-        address distributionServiceAddress = registry.getServiceAddress(DISTRIBUTION(), majorVersion);
-        accessManager.grantRole(DISTRIBUTION_SERVICE_ROLE().toInt(), distributionServiceAddress, 0);
-        bytes4[] memory instanceDistributionServiceSelectors = new bytes4[](9);
-        //instanceDistributionServiceSelectors[0] = instanceStore.createDistributionSetup.selector;
-        //instanceDistributionServiceSelectors[1] = instanceStore.updateDistributionSetup.selector;
-        instanceDistributionServiceSelectors[0] = instanceStore.createDistributorType.selector;
-        instanceDistributionServiceSelectors[1] = instanceStore.updateDistributorType.selector;
-        instanceDistributionServiceSelectors[2] = instanceStore.updateDistributorTypeState.selector;
-        instanceDistributionServiceSelectors[3] = instanceStore.createDistributor.selector;
-        instanceDistributionServiceSelectors[4] = instanceStore.updateDistributor.selector;
-        instanceDistributionServiceSelectors[5] = instanceStore.updateDistributorState.selector;
-        instanceDistributionServiceSelectors[6] = instanceStore.createReferral.selector;
-        instanceDistributionServiceSelectors[7] = instanceStore.updateReferral.selector;
-        instanceDistributionServiceSelectors[8] = instanceStore.updateReferralState.selector;
-        instanceAdmin.setTargetFunctionRoleByService(
-            "InstanceStore",
-            instanceDistributionServiceSelectors,
-            DISTRIBUTION_SERVICE_ROLE());
-    }
-
-    function _grantPoolServiceAuthorizations(
-        AccessManagerExtendedInitializeable accessManager,
-        InstanceAdmin instanceAdmin,
-        InstanceStore instanceStore,
-        IRegistry registry,
-        VersionPart majorVersion)
-        private
-    {
-        // configure authorization for pool service on instance
-        address poolServiceAddress = registry.getServiceAddress(POOL(), majorVersion);
-        accessManager.grantRole(POOL_SERVICE_ROLE().toInt(), address(poolServiceAddress), 0);
-        bytes4[] memory instancePoolServiceSelectors = new bytes4[](1); // TODO works with (4)
-        instancePoolServiceSelectors[0] = instanceStore.updatePool.selector;
-        instanceAdmin.setTargetFunctionRoleByService(
-            "InstanceStore",
-            instancePoolServiceSelectors,
-            POOL_SERVICE_ROLE());
-    }
-
-    function _grantProductServiceAuthorizations(
-        AccessManagerExtendedInitializeable accessManager,
-        InstanceAdmin instanceAdmin,
-        InstanceStore instanceStore,
-        IRegistry registry,
-        VersionPart majorVersion)
-        private
-    {
-        // configure authorization for product service on instance
-        address productServiceAddress = registry.getServiceAddress(PRODUCT(), majorVersion);
-        accessManager.grantRole(PRODUCT_SERVICE_ROLE().toInt(), productServiceAddress, 0);
-        bytes4[] memory instanceProductServiceSelectors = new bytes4[](3);
-        instanceProductServiceSelectors[0] = instanceStore.createRisk.selector;
-        instanceProductServiceSelectors[1] = instanceStore.updateRisk.selector;
-        instanceProductServiceSelectors[2] = instanceStore.updateRiskState.selector;
-        instanceAdmin.setTargetFunctionRoleByService(
-            "InstanceStore",
-            instanceProductServiceSelectors,
-            PRODUCT_SERVICE_ROLE());
-    }
-
-    function _grantApplicationServiceAuthorizations(
-        AccessManagerExtendedInitializeable accessManager,
-        InstanceAdmin instanceAdmin,
-        InstanceStore instanceStore,
-        IRegistry registry,
-        VersionPart majorVersion)
-        private
-    {
-        // configure authorization for application services on instance
-        address applicationServiceAddress = registry.getServiceAddress(APPLICATION(), majorVersion);
-        accessManager.grantRole(APPLICATION_SERVICE_ROLE().toInt(), applicationServiceAddress, 0);
-        bytes4[] memory instanceApplicationServiceSelectors = new bytes4[](3);
-        instanceApplicationServiceSelectors[0] = instanceStore.createApplication.selector;
-        instanceApplicationServiceSelectors[1] = instanceStore.updateApplication.selector;
-        instanceApplicationServiceSelectors[2] = instanceStore.updateApplicationState.selector;
-        instanceAdmin.setTargetFunctionRoleByService(
-            "InstanceStore",
-            instanceApplicationServiceSelectors,
-            APPLICATION_SERVICE_ROLE());
-    }
-
-    function _grantPolicyServiceAuthorizations(
-        AccessManagerExtendedInitializeable accessManager,
-        InstanceAdmin instanceAdmin,
-        InstanceStore instanceStore,
-        IRegistry registry,
-        VersionPart majorVersion)
-        private
-    {
-        // configure authorization for policy services on instance
-        address policyServiceAddress = registry.getServiceAddress(POLICY(), majorVersion);
-        accessManager.grantRole(POLICY_SERVICE_ROLE().toInt(), policyServiceAddress, 0);
-        bytes4[] memory instancePolicyServiceSelectors = new bytes4[](2);
-        instancePolicyServiceSelectors[0] = instanceStore.updatePolicy.selector;
-        instancePolicyServiceSelectors[1] = instanceStore.updatePolicyState.selector;
-        instanceAdmin.setTargetFunctionRoleByService(
-            "InstanceStore",
-            instancePolicyServiceSelectors,
-            POLICY_SERVICE_ROLE());
-    }
-
-    function _grantClaimServiceAuthorizations(
-        AccessManagerExtendedInitializeable accessManager,
-        InstanceAdmin instanceAdmin,
-        InstanceStore instanceStore,
-        IRegistry registry,
-        VersionPart majorVersion)
-        private
-    {
-        // configure authorization for claim/payout services on instance
-        address claimServiceAddress = registry.getServiceAddress(CLAIM(), majorVersion);
-        accessManager.grantRole(CLAIM_SERVICE_ROLE().toInt(), claimServiceAddress, 0);
-
-        bytes4[] memory instancePolicyServiceSelectors = new bytes4[](1);
-        instancePolicyServiceSelectors[0] = instanceStore.updatePolicyClaims.selector;
-        instanceAdmin.setTargetFunctionRoleByService(
-            "InstanceStore",
-            instancePolicyServiceSelectors, 
-            CLAIM_SERVICE_ROLE());
-
-        bytes4[] memory instanceClaimServiceSelectors = new bytes4[](4);
-        instanceClaimServiceSelectors[0] = instanceStore.createClaim.selector;
-        instanceClaimServiceSelectors[1] = instanceStore.updateClaim.selector;
-        instanceClaimServiceSelectors[2] = instanceStore.createPayout.selector;
-        instanceClaimServiceSelectors[3] = instanceStore.updatePayout.selector;
-        instanceAdmin.setTargetFunctionRoleByService(
-            "InstanceStore",
-            instanceClaimServiceSelectors, 
-            CLAIM_SERVICE_ROLE());
-    }
-
-    function _grantBundleServiceAuthorizations(
-        AccessManagerExtendedInitializeable accessManager,
-        InstanceAdmin instanceAdmin,
-        InstanceStore instanceStore,
-        BundleManager bundleManager,
-        IRegistry registry,
-        VersionPart majorVersion)
-        private
-    {
-        // configure authorization for bundle service on instance
-        address bundleServiceAddress = registry.getServiceAddress(BUNDLE(), majorVersion);
-        accessManager.grantRole(BUNDLE_SERVICE_ROLE().toInt(), bundleServiceAddress, 0);
-        bytes4[] memory instanceBundleServiceSelectors = new bytes4[](5);
-        instanceBundleServiceSelectors[0] = instanceStore.createBundle.selector;
-        instanceBundleServiceSelectors[1] = instanceStore.updateBundle.selector;
-        instanceBundleServiceSelectors[2] = instanceStore.updateBundleState.selector;
-        instanceBundleServiceSelectors[3] = instanceStore.increaseLocked.selector;
-        instanceBundleServiceSelectors[4] = instanceStore.decreaseLocked.selector;
-        instanceAdmin.setTargetFunctionRoleByService(
-            "InstanceStore",
-            instanceBundleServiceSelectors,
-            BUNDLE_SERVICE_ROLE());
-
-        // configure authorization for bundle service on bundle manager
-        bytes4[] memory bundleManagerBundleServiceSelectors = new bytes4[](5);
-        bundleManagerBundleServiceSelectors[0] = bundleManager.linkPolicy.selector;
-        bundleManagerBundleServiceSelectors[1] = bundleManager.unlinkPolicy.selector;
-        bundleManagerBundleServiceSelectors[2] = bundleManager.add.selector;
-        bundleManagerBundleServiceSelectors[3] = bundleManager.lock.selector;
-        bundleManagerBundleServiceSelectors[4] = bundleManager.unlock.selector;
-        instanceAdmin.setTargetFunctionRoleByService(
-            "BundleManager",
-            bundleManagerBundleServiceSelectors,
-            BUNDLE_SERVICE_ROLE());
-    }
-
-    function _grantInstanceServiceAuthorizations(
-        AccessManagerExtendedInitializeable accessManager,
-        InstanceAdmin instanceAdmin,
-        Instance instance,
-        IRegistry registry,
-        VersionPart majorVersion)
-        private
-    {
-        // configure authorization for instance service on instance
-        address instanceServiceAddress = registry.getServiceAddress(INSTANCE(), majorVersion);
-        accessManager.grantRole(INSTANCE_SERVICE_ROLE().toInt(), instanceServiceAddress, 0);
-        bytes4[] memory instanceInstanceServiceSelectors = new bytes4[](1);
-        instanceInstanceServiceSelectors[0] = instance.setInstanceReader.selector;
-        instanceAdmin.setTargetFunctionRoleByService(
-            "Instance",
-            instanceInstanceServiceSelectors,
-            INSTANCE_SERVICE_ROLE());
-
-        // configure authorizations for instance service on instance access manager
-        bytes4[] memory instanceAdminInstanceServiceSelectors = new bytes4[](3);
-        instanceAdminInstanceServiceSelectors[0] = instanceAdmin.createGifTarget.selector;
-        instanceAdminInstanceServiceSelectors[1] = instanceAdmin.setTargetLockedByService.selector;
-        instanceAdminInstanceServiceSelectors[2] = instanceAdmin.setTargetFunctionRoleByService.selector;
-        instanceAdmin.setTargetFunctionRoleByService(
-            "InstanceAdmin",
-            instanceAdminInstanceServiceSelectors,
-            INSTANCE_SERVICE_ROLE());
-    }
-
-    function _grantInstanceAuthorizations(
-        AccessManagerExtendedInitializeable accessManager,
-        InstanceAdmin instanceAdmin,
-        Instance instance,
-        IRegistry registry,
-        VersionPart majorVersion)
-        private
-    {
-        // configure authorizations for instance on instance admin
-        bytes4[] memory instanceAdminInstanceSelectors = new bytes4[](4);
-        instanceAdminInstanceSelectors[0] = instanceAdmin.createRole.selector;
-        instanceAdminInstanceSelectors[1] = instanceAdmin.createTarget.selector;
-        instanceAdminInstanceSelectors[2] = instanceAdmin.setTargetFunctionRoleByInstance.selector;
-        instanceAdminInstanceSelectors[3] = instanceAdmin.setTargetLockedByInstance.selector;
-        instanceAdmin.setTargetFunctionRoleByService(
-            "InstanceAdmin",
-            instanceAdminInstanceSelectors,
-            INSTANCE_ROLE());
-    }
-
-    function _grantInstanceOwnerAuthorizations(
-        InstanceAdmin instanceAdmin,
-        Instance instance,
-        IRegistry registry,
-        VersionPart majorVersion) 
-        private 
-    {
-        // configure authorization for instance owner on instance access manager
-        // instance owner role is granted/revoked ONLY by INSTANCE_ROLE
-        bytes4[] memory instanceInstanceOwnerSelectors = new bytes4[](4);
-        instanceInstanceOwnerSelectors[0] = instance.createRole.selector;
-        instanceInstanceOwnerSelectors[1] = instance.createTarget.selector;
-        instanceInstanceOwnerSelectors[2] = instance.setTargetFunctionRole.selector;
-        instanceInstanceOwnerSelectors[3] = instance.setTargetLocked.selector;
-        instanceAdmin.setTargetFunctionRoleByService(
-            "Instance",
-            instanceInstanceOwnerSelectors,
-            INSTANCE_OWNER_ROLE());
-    }
-}

package/contracts/registry/ServiceAuthorizationsLib.sol

@@ -1,173 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-pragma solidity ^0.8.20;
-
-import {
-     RoleId, 
-     PRODUCT_OWNER_ROLE, POOL_OWNER_ROLE, ORACLE_OWNER_ROLE,
-     APPLICATION_SERVICE_ROLE, BUNDLE_SERVICE_ROLE, COMPONENT_SERVICE_ROLE, DISTRIBUTION_SERVICE_ROLE, INSTANCE_SERVICE_ROLE, POLICY_SERVICE_ROLE, POOL_SERVICE_ROLE, PRODUCT_SERVICE_ROLE, STAKING_SERVICE_ROLE
-} from "../../contracts/type/RoleId.sol";
-
-import {
-     ObjectType, 
-     REGISTRY, SERVICE, PRODUCT, ORACLE, POOL, INSTANCE, COMPONENT, DISTRIBUTION, DISTRIBUTOR, APPLICATION, POLICY, CLAIM, BUNDLE, STAKE, STAKING, PRICE
-} from "../../contracts/type/ObjectType.sol";
-
-import {ComponentService} from "../shared/ComponentService.sol";
-import {InstanceService} from "../instance/InstanceService.sol";
-import {RegistryService} from "./RegistryService.sol";
-
-library ServiceAuthorizationsLib {
-
-     struct ServiceAuthorization {
-          RoleId[] authorizedRole;
-          bytes4[][] authorizedSelectors;
-     }
-
-     /// @dev returns the full list of gif service domains for this release.
-     /// services need to be registered for the release in revers order of this list.
-     function getDomains()
-          external
-          pure
-          returns(
-               ObjectType[] memory domain
-          )
-     {
-          domain = new ObjectType[](11);
-          domain[0] = POLICY();
-          domain[1] = APPLICATION();
-          domain[2] = CLAIM();
-          domain[3] = PRODUCT();
-          domain[4] = POOL();
-          domain[5] = BUNDLE();
-          domain[6] = PRICE();
-          domain[7] = DISTRIBUTION();
-          domain[8] = COMPONENT();
-          domain[9] = INSTANCE();
-          domain[10] = STAKING();
-     }
-
-
-     /// @dev given the target domain this function returns the list of authorized function signatures per authorized domain.
-     function getAuthorizations(ObjectType domain)
-          external
-          pure
-          returns(
-               ServiceAuthorization memory authorizations
-          )
-     {
-          if(domain == REGISTRY()) { return _getRegistryServiceAuthorization(); }
-          if(domain == INSTANCE()) { return _getInstanceServiceAuthorization(); }
-          if(domain == COMPONENT()) { return _getComponentServiceAuthorization(); }
-
-          // disallows access to all functions with a restricted modifier
-          return _getDefaultAuthorizations();
-     }
-
-
-     /// @dev registry service authorization.
-     /// returns all authorized function signatures per authorized domain.
-     /// all listed functions MUST be implemented with a restricted modifier
-     function _getRegistryServiceAuthorization()
-          internal
-          pure
-          returns (ServiceAuthorization memory authz)
-     {
-          uint8 authorizedRoles = 8;
-          authz.authorizedRole = new RoleId[](authorizedRoles);
-          authz.authorizedSelectors = new bytes4[][](authorizedRoles);
-
-          // TODO role ids need to have a stable setup, this is not the case currently
-          authz.authorizedRole[0] = APPLICATION_SERVICE_ROLE();
-          authz.authorizedSelectors[0] = new bytes4[](1);
-          authz.authorizedSelectors[0][0] = RegistryService.registerPolicy.selector;
-
-          authz.authorizedRole[1] = POOL_SERVICE_ROLE();
-          authz.authorizedSelectors[1] = new bytes4[](1);
-          authz.authorizedSelectors[1][0] = RegistryService.registerPool.selector;
-
-          authz.authorizedRole[2] = BUNDLE_SERVICE_ROLE();
-          authz.authorizedSelectors[2] = new bytes4[](1);
-          authz.authorizedSelectors[2][0] = RegistryService.registerBundle.selector;
-
-          authz.authorizedRole[3] = DISTRIBUTION_SERVICE_ROLE();
-          authz.authorizedSelectors[3] = new bytes4[](2);
-          authz.authorizedSelectors[3][0] = RegistryService.registerDistribution.selector;
-          authz.authorizedSelectors[3][1] = RegistryService.registerDistributor.selector;
-
-          authz.authorizedRole[4] = COMPONENT_SERVICE_ROLE();
-          authz.authorizedSelectors[4] = new bytes4[](1);
-          authz.authorizedSelectors[4][0] = RegistryService.registerComponent.selector;
-
-          authz.authorizedRole[5] = INSTANCE_SERVICE_ROLE();
-          authz.authorizedSelectors[5] = new bytes4[](1);
-          authz.authorizedSelectors[5][0] = RegistryService.registerInstance.selector;
-
-          authz.authorizedRole[6] = STAKING_SERVICE_ROLE();
-          authz.authorizedSelectors[6] = new bytes4[](1);
-          authz.authorizedSelectors[6][0] = RegistryService.registerStaking.selector;
-
-          authz.authorizedRole[7] = PRODUCT_SERVICE_ROLE();
-          authz.authorizedSelectors[7] = new bytes4[](1);
-          authz.authorizedSelectors[7][0] = RegistryService.registerProduct.selector;
-     }
-
-
-     /// @dev instance service authorization.
-     /// returns all authorized function signatures per authorized domain.
-     /// all listed functions MUST be implemented with a restricted modifier
-     function _getInstanceServiceAuthorization()
-          internal
-          pure
-          returns (ServiceAuthorization memory authz)
-     {
-          uint8 authorizedRoles = 1;
-          authz.authorizedRole = new RoleId[](authorizedRoles);
-          authz.authorizedSelectors = new bytes4[][](authorizedRoles);
-
-          authz.authorizedRole[0] = COMPONENT_SERVICE_ROLE();
-          authz.authorizedSelectors[0] = new bytes4[](1);
-          authz.authorizedSelectors[0][0] = InstanceService.createComponentTarget.selector;
-     }
-
-
-     /// @dev component service authorization.
-     /// returns all authorized function signatures per authorized domain.
-     /// all listed functions MUST be implemented with a restricted modifier
-     function _getComponentServiceAuthorization()
-          internal
-          pure
-          returns (ServiceAuthorization memory authz)
-     {
-          uint8 authorizedRoles = 4;
-          authz.authorizedRole = new RoleId[](authorizedRoles);
-          authz.authorizedSelectors = new bytes4[][](authorizedRoles);
-
-          authz.authorizedRole[0] = POLICY_SERVICE_ROLE();
-          authz.authorizedSelectors[0] = new bytes4[](1);
-          authz.authorizedSelectors[0][0] = ComponentService.increaseProductFees.selector;
-
-          authz.authorizedRole[1] = DISTRIBUTION_SERVICE_ROLE();
-          authz.authorizedSelectors[1] = new bytes4[](1);
-          authz.authorizedSelectors[1][0] = ComponentService.increaseDistributionBalance.selector;
-
-          authz.authorizedRole[2] = POOL_SERVICE_ROLE();
-          authz.authorizedSelectors[2] = new bytes4[](1);
-          authz.authorizedSelectors[2][0] = ComponentService.increasePoolBalance.selector;
-
-          authz.authorizedRole[3] = BUNDLE_SERVICE_ROLE();
-          authz.authorizedSelectors[3] = new bytes4[](1);
-          authz.authorizedSelectors[3][0] = ComponentService.increaseBundleBalance.selector;
-     }
-
-
-     function _getDefaultAuthorizations()
-          internal
-          pure
-          returns (ServiceAuthorization memory authz)
-     {
-          uint8 authorizedRoles = 0;
-          authz.authorizedRole = new RoleId[](authorizedRoles);
-          authz.authorizedSelectors = new bytes4[][](authorizedRoles);
-     }
-}
-