RulesEngineAdminRolesFacet

Git Source

Inherits: AccessControlEnumerable, ReentrancyGuard

Author: @mpetersoCode55, @ShaneDuncan602, @TJ-Everett, @VoR0220

SPDX-License-Identifier: BUSL-1.1

This contract is a critical component of the Rules Engine, enabling secure and flexible role management.

This contract serves as the primary Admin Roles facet for the Rules Engine. It is responsible for managing, mutating, and granting all admin roles, including policy and calling contract admin roles. It enforces role-based access control and ensures proper role assignment and revocation. The contract also provides mechanisms for proposing and confirming new admin roles.

​

Functions

​

isPolicyAdmin

Checks if an address is the policy admin for a specific policy ID.

function isPolicyAdmin(uint256 _policyId, address _account) public view returns (bool);

Parameters

Returns

​

generatePolicyAdminRole

Generates and assigns a policy admin role to an address.

This function is called internally by the Rules Engine to assign the policy admin role.

function generatePolicyAdminRole(uint256 _policyId, address _account) public nonReentrant returns (bytes32);

Parameters

Returns

​

_grantRolePolicyAdmin

Grants a policy admin role to an address.

Internal function to assign the policy admin role.

function _grantRolePolicyAdmin(bytes32 _role, address _account) internal;

Parameters

​

proposeNewPolicyAdmin

Proposes a new policy admin for a specific policy.

function proposeNewPolicyAdmin(address newPolicyAdmin, uint256 policyId) public;

Parameters

​

confirmNewPolicyAdmin

Confirms the proposed policy admin for a specific policy.

function confirmNewPolicyAdmin(uint256 policyId) public;

Parameters

​

_generatePolicyAdminRoleId

Generates a unique identifier for a policy admin role.

function _generatePolicyAdminRoleId(uint256 _policyId, bytes32 _adminRole) internal pure returns (bytes32);

Parameters

Returns

​

renounceRole

This function is used to renounce Role. It is also preventing policyAdmins from renouncing ther role. They must set another policyAdmin through the function proposeNewPolicyAdmin().

function renounceRole(bytes32 role, address account, uint256 policyId) public nonReentrant;

Parameters

​

revokeRole

enforcing the min-1-admin requirement.

This function overrides the parent’s revokeRole function. Its purpose is to prevent Policy Admins from being revoked through this “backdoor” which would effectively leave the policy in a Policy Admin-orphan state.

function revokeRole(bytes32 role, address account, uint256 policyId) public nonReentrant;

Parameters

​

isCallingContractAdmin

enforcing the min-1-admin requirement for policy admins.

Checks if an address is the calling contract admin for a specific contract.

function isCallingContractAdmin(address _callingContract, address _account) public view returns (bool);

Parameters

Returns

​

grantCallingContractRole

Grants the calling contract admin role to an address.

Call this function from your contract to set the calling contract admin.

function grantCallingContractRole(address _callingContract, address _account) public nonReentrant returns (bytes32);

Parameters

Returns

​

grantCallingContractRoleAccessControl

Function to grant calling contract admin role

Call this function when you are the calling contract admin of your contract

function grantCallingContractRoleAccessControl(address _callingContract, address _account)
    public
    nonReentrant
    returns (bytes32);

Parameters

Returns

​

grantCallingContractRoleOwnable

Grants the calling contract admin role to an address.

Call this function from your contract to set the calling contract admin.

function grantCallingContractRoleOwnable(address _callingContract, address _account)
    public
    nonReentrant
    returns (bytes32);

Parameters

Returns

​

_generateCallingContractAdminRoleId

Generates a unique identifier for a calling contract admin role.

function _generateCallingContractAdminRoleId(address _callingContract, bytes32 _adminRole)
    internal
    pure
    returns (bytes32);

Parameters

Returns

​

proposeNewCallingContractAdmin

There can only ever be one Calling Contract Admin per calling contract

This function grants the proposed admin role to the newPolicyAdmin address

Calling Contract Admin does not have a revoke or renounce function. Only Use Propose and Confirm to transfer Role.

function proposeNewCallingContractAdmin(address callingContractAddress, address newCallingContractAdmin) public;

Parameters

​

confirmNewCallingContractAdmin

This function confirms the proposed admin role

function confirmNewCallingContractAdmin(address callingContractAddress) public;

Parameters

​

grantRole

Overrides the parent’s grantRole function to disable its public nature.

This function is intentionally disabled to enforce role granting through specific channels.

function grantRole(bytes32 role, address account) public pure override(AccessControl, IAccessControl);

Parameters

​

renounceRole

this is done to funnel all the role granting functions through this contract since the policyAdmins could add other policyAdmins through this back door

Overrides the parent’s renounceRole function to disable its public nature.

This function is intentionally disabled to enforce role renouncing through specific channels.

function renounceRole(bytes32 role, address account) public virtual override(AccessControl, IAccessControl);

Parameters

​

revokeRole

Overrides the parent’s revokeRole function to disable its public nature.

This function is intentionally disabled to enforce role revocation through specific channels.

function revokeRole(bytes32 role, address account) public virtual override(AccessControl, IAccessControl);

Parameters