Access Controls

Term Finance Protocol contracts inherit from OpenZeppelin's AccessControlUpgradeable.sol contract, an upgradeable variant of AccessControl.sol. This allows Protocol contracts to define multiple roles, each with access to perform different sets of actions. The table below documents all roles, their multi-signature wallets and modules, and accessible methods assigned within the Protocol.

Role and Addresses Contracts and Methods

Role and Addresses	Contracts and Methods
DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/9) with an invalidator role	`All Contracts`: _authorizeUpgrade e.g. `_authorizeUpgrade` `TermInitializer.sol`: `pauseDeploying` `unpauseDeploying` `TermController.sol` : `updateTreasuryAddress` `updateProtocolReserveAddress` `TermPriceConsumerV3.sol`: `addNewTokenPriceFeed` `removeTokenPriceFeed`
ADMIN_ROLE Admin Gnosis Safe (4/9)	Access to various admin actions for each contract group, documented below: Term Auction Group Term Servicer Group Term Repo Token Protocol Contracts
INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/9)	`TermInitializer.sol`: `setupTerm` `setupAuction`
CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)	`TermController.sol` : `markTermDeployed` `unmarkTermDeployed`

DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/9) with an invalidator role

All Contracts:

_authorizeUpgrade
e.g. _authorizeUpgrade

TermInitializer.sol:

TermController.sol :

TermPriceConsumerV3.sol:

ADMIN_ROLE Admin Gnosis Safe (4/9)

Access to various admin actions for each contract group, documented below:

INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/9)

TermInitializer.sol:

CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)

TermController.sol :

Role and Addresses Contracts and Methods

Role and Addresses	Contracts and Methods
DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/9) with an invalidator role	`All Contracts`: _authorizeUpgrade e.g. `_authorizeUpgrade` `TermInitializer.sol`: `pauseDeploying` `unpauseDeploying` `TermController.sol` : `updateTreasuryAddress` `updateProtocolReserveAddress` `TermPriceConsumerV3.sol`: `addNewTokenPriceFeed` `removeTokenPriceFeed`
ADMIN_ROLE Admin Gnosis Safe (4/9)	Access to various admin actions for each contract group, documented below: Term Auction Group Term Servicer Group Term Repo Token Protocol Contracts
INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/9)	`TermInitializer.sol`: `setupTerm` `setupAuction`
CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)	`TermController.sol` : `markTermDeployed` `unmarkTermDeployed`

DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/9) with an invalidator role

All Contracts:

_authorizeUpgrade
e.g. _authorizeUpgrade

TermInitializer.sol:

TermController.sol :

TermPriceConsumerV3.sol:

ADMIN_ROLE Admin Gnosis Safe (4/9)

Access to various admin actions for each contract group, documented below:

INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/9)

TermInitializer.sol:

CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)

TermController.sol :

Signers of the DevOps-Proposer Gnosis Safes and Admin Gnosis Safes are required to abide by the Signer Compliance Policy viewable here.

Last updated 3 months ago