Class AccessControl<T>

Represents a role-based access control object.

Remarks

Manages roles and permissions using a bitmask approach. Each bit in a bitmask represents a distinct permission.

Example

import { Context, Address } from '@massalabs/massa-as-sdk';
import { Args, stringToBytes } from '@massalabs/as-types';
import { AccessControl } from '@massalabs/sc-standards';

const controller = new AccessControl<u8>(1);
const ADMIN = controller.newPermission('admin');
const USER = controller.newPermission('user');

export function constructor(raw: StaticArray<u8>): StaticArray<u8> {
  if (!Context.isDeployingContract()) {
    return [];
  }

  const args = new Args(raw);
  const adminAddress = args.nextSerializable<Address>().expect('Admin address is missing');
  const userAddress = args.nextSerializable<Address>().expect('User address is missing');

  controller.grantPermission(ADMIN, adminAddress);
  controller.grantPermission(USER, userAddress);

  return [];
}

export function superSensible(_: StaticArray<u8>): StaticArray<u8> {
  controller.mustHavePermission(ADMIN, Context.caller());
  return stringToBytes('Super sensitive data');
}

export function internalOnly(_: StaticArray<u8>): StaticArray<u8> {
  controller.mustHaveAnyPermission(ADMIN | USER, Context.caller());
  return stringToBytes('Internal data');
}

export function publicData(_: StaticArray<u8>): StaticArray<u8> {
  return stringToBytes('Public data');
}