Skip to content

set_privacy` does not consistently require owner authorization for all privacy APIs #332

Description

@grantfox-oss

set_privacy` is guarded, but other privacy endpoints and legacy access paths may bypass the same auth semantics. Harden all privacy APIs and tests.

  • Impacted files: app/contract/contracts/Folder/src/lib.rs, app/contract/contracts/Folder/src/privacy.rs, app/contract/contracts/Folder/src/storage.rs, app/contract/contracts/Folder/src/test.rs, app/contract/contracts/Folder/src/metadata_test.rs, app/contract/docs/UPGRADE_SAFETY_GATE_TEST_GUIDE.md

Metadata

Metadata

Assignees

Labels

GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions