eluv-io / contracts

Eluvio Content Management Smart Contracts
MIT License
10 stars 0 forks source link

Need to disallow direct content object delete #29

Open paulgoleary opened 5 years ago

paulgoleary commented 5 years ago

Right now the owner of a content object can directly call kill on the contract. This corrupts the elv-master data model because we need the ContentObjectDeleted event to be thrown from the owning library in order to keep indexes in sync.

However, we can't immediately just disallow any account besides the library to call kill because - for other reasons - we took onlyOwner off of the delete content function in the library.

Long story short, we need to figure out the correct way to auth this.

elv-preethi commented 5 years ago

tested PM/qdel branch contract with qfab_cli library content delete command with following scenarios :