Skip to content

program: Remove authority bypass on close - #52

Merged
febo merged 2 commits into
mainfrom
febo/require-authority
May 11, 2026
Merged

febo merged 2 commits into
mainfrom
febo/require-authority

Conversation

@febo

@febo febo commented May 9, 2026

Copy link
Copy Markdown
Contributor

Problem

As described in #45, the authority check can be bypassed when using the buffer keypair. While the behaviour is intentional, it is confusing since a buffer will always have an authority set.

Solution

Remove the authority bypass.

Fixes #45

@febo
febo requested a review from lorisleiva May 9, 2026 15:20
lorisleiva
lorisleiva previously approved these changes May 11, 2026

@lorisleiva lorisleiva left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good! Should we maybe add a regression test?

@febo

febo commented May 11, 2026

Copy link
Copy Markdown
Contributor Author

Looks good! Should we maybe add a regression test?

Added tests.

@febo
febo requested a review from lorisleiva May 11, 2026 11:27

@lorisleiva lorisleiva left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you!

@febo
febo merged commit 7bf3956 into main May 11, 2026
9 checks passed
@febo
febo deleted the febo/require-authority branch May 11, 2026 12:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Unauthorized Buffer Closure via Authority==Buffer Bypass

2 participants