bitshares / bitshares/bitshares-core
Fix recursive account permissions
- Dominant language
- C++
- Stars
- 1.2k
- Forks
- 660
- Avg merge
- 8h 17m
- Merged PRs (30d)
- 26
Description
BitShares allow to change permissions of account A to account A.
More info can be found here: https://steemit.com/blockchain/@hipster/sad-story-how-i-lost-bitshares-account
Contributor guide
No contributing guide indexed for this repository
Research direction
No file, test, or entry point is named. Start by reading the linked incident report, then locate the account-permission validation path in the C++ code and examine how an account can name itself. Done means recursive self-permission changes are rejected, with a regression test covering account A assigning permissions to account A.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp
- Domain
- authorization, blockchain
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100