You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
108 lines
2.7 KiB
108 lines
2.7 KiB
pragma solidity ^0.4.23;
|
|
|
|
import "./Roles.sol";
|
|
|
|
|
|
/**
|
|
* @title RBAC (Role-Based Access Control)
|
|
* @author Matt Condon (@Shrugs)
|
|
* @dev Stores and provides setters and getters for roles and addresses.
|
|
* @dev Supports unlimited numbers of roles and addresses.
|
|
* @dev See //contracts/mocks/RBACMock.sol for an example of usage.
|
|
* This RBAC method uses strings to key roles. It may be beneficial
|
|
* for you to write your own implementation of this interface using Enums or similar.
|
|
* It's also recommended that you define constants in the contract, like ROLE_ADMIN below,
|
|
* to avoid typos.
|
|
*/
|
|
contract RBAC {
|
|
using Roles for Roles.Role;
|
|
|
|
mapping (string => Roles.Role) private roles;
|
|
|
|
event RoleAdded(address addr, string roleName);
|
|
event RoleRemoved(address addr, string roleName);
|
|
|
|
/**
|
|
* @dev reverts if addr does not have role
|
|
* @param addr address
|
|
* @param roleName the name of the role
|
|
* // reverts
|
|
*/
|
|
function checkRole(address addr, string roleName)
|
|
view
|
|
public
|
|
{
|
|
roles[roleName].check(addr);
|
|
}
|
|
|
|
/**
|
|
* @dev determine if addr has role
|
|
* @param addr address
|
|
* @param roleName the name of the role
|
|
* @return bool
|
|
*/
|
|
function hasRole(address addr, string roleName)
|
|
view
|
|
public
|
|
returns (bool)
|
|
{
|
|
return roles[roleName].has(addr);
|
|
}
|
|
|
|
/**
|
|
* @dev add a role to an address
|
|
* @param addr address
|
|
* @param roleName the name of the role
|
|
*/
|
|
function addRole(address addr, string roleName)
|
|
internal
|
|
{
|
|
roles[roleName].add(addr);
|
|
emit RoleAdded(addr, roleName);
|
|
}
|
|
|
|
/**
|
|
* @dev remove a role from an address
|
|
* @param addr address
|
|
* @param roleName the name of the role
|
|
*/
|
|
function removeRole(address addr, string roleName)
|
|
internal
|
|
{
|
|
roles[roleName].remove(addr);
|
|
emit RoleRemoved(addr, roleName);
|
|
}
|
|
|
|
/**
|
|
* @dev modifier to scope access to a single role (uses msg.sender as addr)
|
|
* @param roleName the name of the role
|
|
* // reverts
|
|
*/
|
|
modifier onlyRole(string roleName)
|
|
{
|
|
checkRole(msg.sender, roleName);
|
|
_;
|
|
}
|
|
|
|
/**
|
|
* @dev modifier to scope access to a set of roles (uses msg.sender as addr)
|
|
* @param roleNames the names of the roles to scope access to
|
|
* // reverts
|
|
*
|
|
* @TODO - when solidity supports dynamic arrays as arguments to modifiers, provide this
|
|
* see: https://github.com/ethereum/solidity/issues/2467
|
|
*/
|
|
// modifier onlyRoles(string[] roleNames) {
|
|
// bool hasAnyRole = false;
|
|
// for (uint8 i = 0; i < roleNames.length; i++) {
|
|
// if (hasRole(msg.sender, roleNames[i])) {
|
|
// hasAnyRole = true;
|
|
// break;
|
|
// }
|
|
// }
|
|
|
|
// require(hasAnyRole);
|
|
|
|
// _;
|
|
// }
|
|
}
|
|
|