AUT_Roles_v2

Provides the access control mechanism for managing roles and permissions across different modules within the Inverter Network, ensuring secure and controlled access to critical functionalities. Source: src/core/authorizer/AUT_Roles_v2.sol. Interfaces: IAuthorizer_v2, IAuthorizer_v2_AdminSeal, IAuthorizer_v2_DefaultAdminAcceptance, IPresaleClaimPermission_v1.

Functions

acceptDefaultAdmin

function acceptDefaultAdmin(uint48 nonce_) external;

Accept a matching live offer by a direct core call. Parameters

Name	Type	Description
`nonce_`	`uint48`	The offered nonce.

IAuthorizer_v2_DefaultAdminAcceptance.sol#L64

addAccessPermission

function addAccessPermission(address target_, bytes4 selector_, bytes32 roleId_) external;

Adds a new permission to the given roleId to call the given function in the target contract. Parameters

Name	Type	Description
`target_`	`address`	The address of the target contract.
`selector_`	`bytes4`	The selector of the function.
`roleId_`	`bytes32`	The roleId that will receive the permission.

IAuthorizer_v2.sol#L250

burnRoleAdmin

function burnRoleAdmin(bytes32 roleId_) external;

Burns the admin of the given roleId. Parameters

Name	Type	Description
`roleId_`	`bytes32`	The role for which to burn the admin.

IAuthorizer_v2.sol#L236

cancelDefaultAdminOffer

function cancelDefaultAdminOffer(address candidate_, uint48 nonce_) external;

Cancel an exact offer as its sponsor or candidate. Parameters

Name	Type	Description
`candidate_`	`address`	The offered core.
`nonce_`	`uint48`	The offered nonce.

IAuthorizer_v2_DefaultAdminAcceptance.sol#L68

confirmDefaultAdmin

function confirmDefaultAdmin() external;

Confirm the current holder’s runtime by a direct call. IAuthorizer_v2_DefaultAdminAcceptance.sol#L70

createRole

function createRole(
    string memory roleName_,
    bytes32 respectiveAdminRole_,
    address[] memory initialMembers_
) external returns (bytes32 newRoleId_);

Creates a new role and adds initial members to it. Parameters

Name	Type	Description
`roleName_`	`string`	The name of the role to create.
`respectiveAdminRole_`	`bytes32`	The role ID of the admin role.
`initialMembers_`	`address[]`	The addresses of the initial members.

Returns

Name	Type	Description
`newRoleId_`	`bytes32`	The ID of the newly created role.

IAuthorizer_v2.sol#L206

createRoleAndAddAccessPermissions

function createRoleAndAddAccessPermissions(
    string memory roleName_,
    bytes32 respectiveAdminRole_,
    address[] memory initialMembers_,
    address[] memory targets_,
    bytes4[][] memory selectors_
) external returns (bytes32 newRoleId_);

Creates a new role, adds initial members to it and adds permission to call to the respective functions. Parameters

Name	Type	Description
`roleName_`	`string`	The name of the role to create.
`respectiveAdminRole_`	`bytes32`	The role ID of the admin role.
`initialMembers_`	`address[]`	The addresses of the initial members.
`targets_`	`address[]`	The addresses of the target contracts.
`selectors_`	`bytes4[][]`	The selectors of the functions.

Returns

Name	Type	Description
`newRoleId_`	`bytes32`	The ID of the newly created role.

IAuthorizer_v2.sol#L294

labelRole

function labelRole(bytes32 roleId_, string memory newRoleName_) external;

Changes the name of a role. Parameters

Name	Type	Description
`roleId_`	`bytes32`	The ID of the role to change the name of.
`newRoleName_`	`string`	The new name of the role.

IAuthorizer_v2.sol#L219

proposeDefaultAdmin

function proposeDefaultAdmin(
    address candidate_,
    uint48 expiresAt_
) external returns (uint48 nonce_);

Propose the configured core after selector admission. Parameters

Name	Type	Description
`candidate_`	`address`	Must be the configured core.
`expiresAt_`	`uint48`	Deadline covers core delay, window and margin.

Returns

Name	Type	Description
`nonce_`	`uint48`	The new offer nonce.

IAuthorizer_v2_DefaultAdminAcceptance.sol#L59

removeAccessPermission

function removeAccessPermission(address target_, bytes4 selector_, bytes32 roleId_) external;

Removes a permission from the given roleid to call the given function in the target contract. Parameters

Name	Type	Description
`target_`	`address`	The address of the target contract.
`selector_`	`bytes4`	The selector of the function.
`roleId_`	`bytes32`	The roleId to remove.

IAuthorizer_v2.sol#L267

removePresaleCreditFacilityPair

function removePresaleCreditFacilityPair(address presale_) external;

Removes an admitted Presale/CreditFacility pair. Parameters

Name	Type	Description
`presale_`	`address`	The Presale address whose pair is removed.

IPresaleClaimPermission_v1.sol#L93

sealDefaultAdmin

function sealDefaultAdmin() external;

Irreversibly prevents changing membership of DEFAULT_ADMIN_ROLE. IAuthorizer_v2.sol#L318

setPresaleCreditFacilityPair

function setPresaleCreditFacilityPair(address presale_, address creditFacility_) external;

Admits or rebinds a Presale/CreditFacility pair. Parameters

Name	Type	Description
`presale_`	`address`	The Presale address.
`creditFacility_`	`address`	The CreditFacility address, or zero to remove.

IPresaleClaimPermission_v1.sol#L84

transferAdminRole

function transferAdminRole(bytes32 roleId_, bytes32 newAdminRoleId_) external;

Transfer the admin rights to a given role. Parameters

Name	Type	Description
`roleId_`	`bytes32`	The role on which to peform the admin transfer.
`newAdminRoleId_`	`bytes32`	The new role to which to transfer admin access to.

IAuthorizer_v2.sol#L228

View functions

defaultAdminIdentity

function defaultAdminIdentity(address account_) external view returns (bytes32 identity_);

Read the confirmed runtime identity. Parameters

Name	Type	Description
`account_`	`address`	The account to read.

Returns

Name	Type	Description
`identity_`	`bytes32`	Confirmed runtime hash, or zero.

IAuthorizer_v2_DefaultAdminAcceptance.sol#L81

defaultAdminOffer

function defaultAdminOffer(
    address candidate_
) external view returns (DefaultAdminOffer memory offer_);

Read an offer; membership does not follow from an offer. Parameters

Name	Type	Description
`candidate_`	`address`	The offered core.

Returns

Name	Type	Description
`offer_`	`DefaultAdminOffer`	Sponsor, expiry and nonce.

IAuthorizer_v2_DefaultAdminAcceptance.sol#L74

getAdminRole

function getAdminRole() external view returns (bytes32 defaultAdminId_);

Returns the role ID of the admin role. Returns

Name	Type	Description
`defaultAdminId_`	`bytes32`	The role ID of the default admin.

IAuthorizer_v2.sol#L143

getLastAssignedRoleId

function getLastAssignedRoleId() external view returns (uint lastAssignedRoleId_);

Returns the number of created role IDs. Returns

Name	Type	Description
`lastAssignedRoleId_`	`uint`	The number of created role IDs.

IAuthorizer_v2.sol#L161

getPermissions

function getPermissions(
    address target_,
    bytes4 selector_
) external view returns (bytes32[] memory permissions_);

Returns the permissions of the given function in the target contract. Parameters

Name	Type	Description
`target_`	`address`	The address of the target contract.
`selector_`	`bytes4`	The selector of the function.

Returns

Name	Type	Description
`permissions_`	`bytes32[]`	The roleIds that are permissioned to call the function.

IAuthorizer_v2.sol#L154

getPresaleCreditFacility

function getPresaleCreditFacility(address presale_) external view returns (address creditFacility_);

Returns the CreditFacility admitted for a Presale. Parameters

Name	Type	Description
`presale_`	`address`	The Presale address.

Returns

Name	Type	Description
`creditFacility_`	`address`	The bound CreditFacility, or the zero address when no pair is admitted.

IPresaleClaimPermission_v1.sol#L58

hasOrdinaryPermission

function hasOrdinaryPermission(
    address caller_,
    address target_,
    bytes4 selector_
) external view returns (bool hasPermission_);

Checks ordinary permission without the claim-protection path. Parameters

Name	Type	Description
`caller_`	`address`	The caller address.
`target_`	`address`	The target contract address.
`selector_`	`bytes4`	The target function selector.

Returns

Name	Type	Description
`hasPermission_`	`bool`	Whether ordinary authorization is present.

IPresaleClaimPermission_v1.sol#L70

hasPermission

function hasPermission(
    address caller_,
    address target_,
    bytes4 selector_
) external view returns (bool hasPermission_);

Checks whether the given caller address holds the required role to execute the given function in the target contract. Parameters

Name	Type	Description
`caller_`	`address`	The address of the caller.
`target_`	`address`	The address of the target contract.
`selector_`	`bytes4`	The selector of the function.

Returns

Name	Type	Description
`hasPermission_`	`bool`	Returns if the address can call the function.

IAuthorizer_v2.sol#L188

isProductionActive

function isProductionActive() external view returns (bool ready_);

True only after reviewed fixed-core handoff and seal. Returns

Name	Type	Description
`ready_`	`bool`	Whether funding can be enabled.

IAuthorizer_v2_DefaultAdminAcceptance.sol#L93

isRolePermissioned

function isRolePermissioned(
    address target_,
    bytes4 selector_,
    bytes32 roleId_
) external view returns (bool isRolePermissioned_);

Returns whether the given roleId has the permission to call the given function in the target contract. Parameters

Name	Type	Description
`target_`	`address`	The address of the target contract.
`selector_`	`bytes4`	The selector of the function.
`roleId_`	`bytes32`	The roleId that we want to check.

Returns

Name	Type	Description
`isRolePermissioned_`	`bool`	Returns whether the roleId is permissioned to call the function.

IAuthorizer_v2.sol#L173

productionAdminCore

function productionAdminCore() external view returns (address core_);

Read the fixed production core. Returns

Name	Type	Description
`core_`	`address`	The configured core.

IAuthorizer_v2_DefaultAdminAcceptance.sol#L87

productionAdminHandoffLocked

function productionAdminHandoffLocked() external view returns (bool locked_);

Read the atomic bootstrap-retirement lock. Returns

Name	Type	Description
`locked_`	`bool`	Whether the bootstrap retired.

IAuthorizer_v2_DefaultAdminAcceptance.sol#L90

Events

AccessPermissionAdded

event AccessPermissionAdded(address target_, bytes4 functionSelector_, bytes32 roleId_);

Emits when a role is added to a function permission. Parameters

Name	Type	Description
`target_`	`address`	The address of the target contract.
`functionSelector_`	`bytes4`	The selector of the function.
`roleId_`	`bytes32`	The ID of the role.

IAuthorizer_v2.sol#L109

AccessPermissionRemoved

event AccessPermissionRemoved(address target_, bytes4 functionSelector_, bytes32 roleId_);

Emits when a role is removed from a function permission. Parameters

Name	Type	Description
`target_`	`address`	The address of the target contract.
`functionSelector_`	`bytes4`	The selector of the function.
`roleId_`	`bytes32`	The ID of the role.

IAuthorizer_v2.sol#L117

DefaultAdminAccepted

event DefaultAdminAccepted(
    address indexed candidate_,
    address indexed sponsor_,
    uint48 nonce_,
    bytes32 codeIdentity_
);

Parameters

Name	Type	Description
`candidate_`	`address indexed`
`sponsor_`	`address indexed`
`nonce_`	`uint48`
`codeIdentity_`	`bytes32`

IAuthorizer_v2_DefaultAdminAcceptance.sol#L41

DefaultAdminConfirmed

event DefaultAdminConfirmed(address indexed account_, bytes32 codeIdentity_);

Parameters

Name	Type	Description
`account_`	`address indexed`
`codeIdentity_`	`bytes32`

IAuthorizer_v2_DefaultAdminAcceptance.sol#L47

DefaultAdminCoreBound

event DefaultAdminCoreBound(address indexed core_);

Parameters

Name	Type	Description
`core_`	`address indexed`

IAuthorizer_v2_DefaultAdminAcceptance.sol#L50

DefaultAdminHandoffLocked

event DefaultAdminHandoffLocked(address indexed core_, address indexed formerBootstrap_);

Parameters

Name	Type	Description
`core_`	`address indexed`
`formerBootstrap_`	`address indexed`

IAuthorizer_v2_DefaultAdminAcceptance.sol#L51

DefaultAdminOfferCancelled

event DefaultAdminOfferCancelled(address indexed candidate_, uint48 nonce_);

Parameters

Name	Type	Description
`candidate_`	`address indexed`
`nonce_`	`uint48`

IAuthorizer_v2_DefaultAdminAcceptance.sol#L40

DefaultAdminProposed

event DefaultAdminProposed(
    address indexed sponsor_,
    address indexed candidate_,
    uint48 nonce_,
    uint48 expiresAt_
);

Parameters

Name	Type	Description
`sponsor_`	`address indexed`
`candidate_`	`address indexed`
`nonce_`	`uint48`
`expiresAt_`	`uint48`

IAuthorizer_v2_DefaultAdminAcceptance.sol#L34

DefaultAdminSealed

event DefaultAdminSealed(address indexed admin_);

Emitted when the default admin role’s admin is irreversibly sealed. Parameters

Name	Type	Description
`admin_`	`address indexed`	The sole default admin that performed the seal.

IAuthorizer_v2.sol#L314

PresaleCreditFacilityPairRemoved

event PresaleCreditFacilityPairRemoved(address indexed presale_, address indexed creditFacility_);

Emitted when a Presale/CreditFacility pair is removed. Parameters

Name	Type	Description
`presale_`	`address indexed`	The Presale address.
`creditFacility_`	`address indexed`	The previously bound CreditFacility.

IPresaleClaimPermission_v1.sol#L47

PresaleCreditFacilityPairSet

event PresaleCreditFacilityPairSet(address indexed presale_, address indexed creditFacility_);

Emitted when a Presale/CreditFacility pair is admitted. Parameters

Name	Type	Description
`presale_`	`address indexed`	The Presale address.
`creditFacility_`	`address indexed`	The CreditFacility bound to the Presale.

IPresaleClaimPermission_v1.sol#L40

RoleAdminBurned

event RoleAdminBurned(bytes32 roleId_);

Emits when a role admin is burned. Parameters

Name	Type	Description
`roleId_`	`bytes32`	The ID of the role for which the admin was burned.

IAuthorizer_v2.sol#L133

RoleCreated

event RoleCreated(bytes32 roleId_, string roleName);

Emits when a role is created. Parameters

Name	Type	Description
`roleId_`	`bytes32`	The ID of the role.
`roleName`	`string`	The name of the role.

IAuthorizer_v2.sol#L124

RoleLabeled

event RoleLabeled(bytes32 roleId_, string newRoleName);

Emits when a role is labeled. Parameters

Name	Type	Description
`roleId_`	`bytes32`	The ID of the role.
`newRoleName`	`string`	The new name of the role.

IAuthorizer_v2.sol#L129

Errors

ModuleAuthorizerActivePresaleCreditFacilityPair

error Module__Authorizer__ActivePresaleCreditFacilityPair(address presale_);

The pair cannot change while claims or purchase creation are active. Parameters

Name	Type	Description
`presale_`	`address`	The protected Presale address.

IPresaleClaimPermission_v1.sol#L32

ModuleAuthorizerAdminRoleMustBeNamed

error Module__Authorizer__AdminRoleMustBeNamed(bytes32 adminRoleId_);

A role admin must be a named role, not PUBLIC or token-gated. Parameters

Name	Type	Description
`adminRoleId_`	`bytes32`	The admin role that was refused.

IAuthorizer_v2.sol#L79

ModuleAuthorizerCannotModifyAdminRoleAccess

error Module__Authorizer__CannotModifyAdminRoleAccess();

The provided role ID is the default admin role. IAuthorizer_v2.sol#L50

ModuleAuthorizerCannotRenounceLastAdmin

error Module__Authorizer__CannotRenounceLastAdmin();

Cannot renounce the last DEFAULT_ADMIN_ROLE. IAuthorizer_v2.sol#L59

ModuleAuthorizerCriticalSelectorRequiresNamedRole

error Module__Authorizer__CriticalSelectorRequiresNamedRole(bytes4 selector_, bytes32 roleId_);

A critical selector can only be held by a named role. Parameters

Name	Type	Description
`selector_`	`bytes4`	The critical selector.
`roleId_`	`bytes32`	The role that was refused.

IAuthorizer_v2.sol#L73

ModuleAuthorizerDefaultAdminAcceptanceRequired

error Module__Authorizer__DefaultAdminAcceptanceRequired();

IAuthorizer_v2_DefaultAdminAcceptance.sol#L14

ModuleAuthorizerDefaultAdminAlreadySealed

error Module__Authorizer__DefaultAdminAlreadySealed();

The default admin has already been sealed. IAuthorizer_v2.sol#L310

ModuleAuthorizerDefaultAdminCoreLocked

error Module__Authorizer__DefaultAdminCoreLocked();

IAuthorizer_v2_DefaultAdminAcceptance.sol#L30

ModuleAuthorizerDefaultAdminHandoffIncomplete

error Module__Authorizer__DefaultAdminHandoffIncomplete();

IAuthorizer_v2_DefaultAdminAcceptance.sol#L29

ModuleAuthorizerDefaultAdminMustHaveSingleHolder

error Module__Authorizer__DefaultAdminMustHaveSingleHolder();

The default admin must have exactly one holder before sealing. IAuthorizer_v2.sol#L307

ModuleAuthorizerDefaultAdminOfferExpired

error Module__Authorizer__DefaultAdminOfferExpired(address candidate_, uint48 nonce_);

Parameters

Name	Type	Description
`candidate_`	`address`
`nonce_`	`uint48`

IAuthorizer_v2_DefaultAdminAcceptance.sol#L21

ModuleAuthorizerDefaultAdminOfferUnauthorized

error Module__Authorizer__DefaultAdminOfferUnauthorized();

IAuthorizer_v2_DefaultAdminAcceptance.sol#L24

ModuleAuthorizerDefaultAdminRenounceRequired

error Module__Authorizer__DefaultAdminRenounceRequired();

IAuthorizer_v2_DefaultAdminAcceptance.sol#L15

ModuleAuthorizerDirectDefaultAdminCallRequired

error Module__Authorizer__DirectDefaultAdminCallRequired();

IAuthorizer_v2_DefaultAdminAcceptance.sol#L25

ModuleAuthorizerInvalidDefaultAdminConfig

error Module__Authorizer__InvalidDefaultAdminConfig();

IAuthorizer_v2_DefaultAdminAcceptance.sol#L16

ModuleAuthorizerInvalidDefaultAdminDeadline

error Module__Authorizer__InvalidDefaultAdminDeadline();

IAuthorizer_v2_DefaultAdminAcceptance.sol#L32

ModuleAuthorizerInvalidDefaultAdminOffer

error Module__Authorizer__InvalidDefaultAdminOffer(address candidate_, uint48 nonce_);

Parameters

Name	Type	Description
`candidate_`	`address`
`nonce_`	`uint48`

IAuthorizer_v2_DefaultAdminAcceptance.sol#L18

ModuleAuthorizerInvalidDefaultAdminRecipient

error Module__Authorizer__InvalidDefaultAdminRecipient(address account_);

Parameters

Name	Type	Description
`account_`	`address`

IAuthorizer_v2_DefaultAdminAcceptance.sol#L17

ModuleAuthorizerInvalidInitialAdmin

error Module__Authorizer__InvalidInitialAdmin();

The provided initial admin address is invalid. IAuthorizer_v2.sol#L47

ModuleAuthorizerInvalidInputLength

error Module__Authorizer__InvalidInputLength();

The provided input length is not valid. IAuthorizer_v2.sol#L56

ModuleAuthorizerInvalidPresaleCreditFacilityPair

error Module__Authorizer__InvalidPresaleCreditFacilityPair();

The supplied Presale/CreditFacility pair is not valid. IPresaleClaimPermission_v1.sol#L27

ModuleAuthorizerMaxPermissionsPerSelectorExceeded

error Module__Authorizer__MaxPermissionsPerSelectorExceeded(address target_, bytes4 selector_);

The maximum number of roles for a selector was reached. Parameters

Name	Type	Description
`target_`	`address`	The target contract for the selector.
`selector_`	`bytes4`	The selector whose permission list is full.

IAuthorizer_v2.sol#L64

ModuleAuthorizerModuleReservePathInUse

error Module__Authorizer__ModuleReservePathInUse(
    bytes32 roleId_,
    address module_,
    bytes4 selector_,
    uint totalLockedIssuance_,
    uint totalOutstandingReserves_
);

A change would remove a module permission on a ReserveManager selector that the module needs to repay or close positions, while the ReserveManager has an open position. Guarded: CreditFacility and StakingManager repay and closePosition permissions (owner rule L30). Parameters

Name	Type	Description
`roleId_`	`bytes32`	The role whose membership or permission would change.
`module_`	`address`	The module that would lose access.
`selector_`	`bytes4`	The ReserveManager selector that would be lost.
`totalLockedIssuance_`	`uint`	The ReserveManager total locked issuance.
`totalOutstandingReserves_`	`uint`	The ReserveManager total outstanding reserves.

IAuthorizer_v2.sol#L94

ModuleAuthorizerNoConfirmedDefaultAdminSurvivor

error Module__Authorizer__NoConfirmedDefaultAdminSurvivor();

IAuthorizer_v2_DefaultAdminAcceptance.sol#L26

ModuleAuthorizerRoleIdNotExisting

error Module__Authorizer__RoleIdNotExisting();

The provided role ID is not existing. IAuthorizer_v2.sol#L53

ModuleAuthorizerUnexpectedDefaultAdminCore

error Module__Authorizer__UnexpectedDefaultAdminCore(address core_);

Parameters

Name	Type	Description
`core_`	`address`

IAuthorizer_v2_DefaultAdminAcceptance.sol#L27

ModuleAuthorizerUnreviewedDefaultAdminCore

error Module__Authorizer__UnreviewedDefaultAdminCore(address core_);

Parameters

Name	Type	Description
`core_`	`address`

IAuthorizer_v2_DefaultAdminAcceptance.sol#L28

ModuleAuthorizerUnsupportedLegacyAuthorizer

error Module__Authorizer__UnsupportedLegacyAuthorizer();

IAuthorizer_v2_DefaultAdminAcceptance.sol#L31