Access Controls
Last updated
Last updated
Term Finance Protocol contracts inherit from OpenZeppelin's AccessControlUpgradeable.sol contract, an upgradeable variant of AccessControl.sol. This allows Protocol contracts to define multiple roles, each with access to perform different sets of actions. The table below documents all roles, their multi-signature wallets and modules, and accessible methods assigned within the Protocol.
| Role and Addresses | Contracts and Methods |
|---|---|
Signers of the DevOps-Proposer Gnosis Safes and Admin Gnosis Safes are required to abide by the Signer Compliance Policy viewable here.
DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/9) with an invalidator role
ADMIN_ROLE Admin Gnosis Safe (4/9)
Access to various admin actions for each contract group, documented below:
INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/9)
TermInitializer.sol:
CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)
DEVOPS_ROLE "Ownerless" Gnosis Safe with 24-hour Zodiac Delay Modifier and Zodiac Roles Modifier providing DevOps-Proposer Gnosis Safe (5/9) with an invalidator role
ADMIN_ROLE Admin Gnosis Safe (4/9)
Access to various admin actions for each contract group, documented below:
INITIALIZER_APPROVER_ROLE Setup Approver Gnosis Safe (3/9)
TermInitializer.sol:
CONTROLLER_ADMIN_ROLE Deploy Tools EOA stored in AWS Parameters managed by AWS Key Management Service (KMS)