Ensure system states, roles, and permissions are sufficiently restrictive.md

120 - Ensure system states, roles, and permissions are sufficiently restrictive

Smart contract code should strive to be strict.

Strict code behaves predictably, is easier to maintain, and increases a system's ability to handle nonideal conditions.

Our assessment of Growth DeFi found that many of its states, roles, and permissions are loosely defined.

Recommendation:

Document the use of administrator permissions.

Monitor the usage of administrator permissions.

Specify strict operation requirements for each contract.

---

Slide Screenshot

---

Slide Text

• ConsenSys Audit Growth DeFi Finding 4.3
• Access Control
• Least Privilege Mechanism
• Loosely Defined Roles/Permissions
• Document & Monitor Roles & Permissions

---

References

• Youtube Reference
• ConsenSys's Audit of Growth DeFi

---

Tags