dfinity / wg-identity-authentication

Repository of the Identity and Wallet Standards Working Group
https://wiki.internetcomputer.org/wiki/Identity_%26_Authentication
Apache License 2.0
31 stars 9 forks source link

ICRC-25: Make permission scope extensible, addresses sec finding F03 #60

Closed frederikrothenberger closed 1 year ago

frederikrothenberger commented 1 year ago

This PR addresses the security review finding F03 by making the permission scope extensible. This allows to define additional properties of the permission scope object in the future, such as restricting the canister_call scope to just certain canisters, methods, or even arguments.

In addition, it also makes a formulation stricter that would have allowed signers to hand out more permissions than initially requested.