Skip to content

Commit f12ec2d

Browse files
authored
Update 0x11-V2-Access-Control.md
1 parent 800caf0 commit f12ec2d

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

1.1/0x11-V2-Access-Control.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,9 +14,9 @@ Category “V2” lists requirements related to the access control mechanisms of
1414

1515
| # | Description |
1616
| --- | --- |
17-
| **2.1** | Verify that the principle of least privilege exists - other contracts should only be able to access functions or data for which they possess specific authorization. |
17+
| **2.1** | Verify that the principle of least privilege exists, other contracts should only be able to access functions and data for which they possess specific authorization. |
1818
| **2.2** | Verify that new contracts with access to the audited contract adhere to the principle of minimum rights by default. Contracts should have a minimal or no permission until access to the new features is explicitly granted. |
19-
| **2.3** | Verify that the creator of the contract complies with the rule of least privilege and his rights strictly follow the documentation. |
19+
| **2.3** | Verify that the creator of the contract complies with the rule of least privilege and their rights strictly follow the documentation. |
2020
| **2.4** | Verify that the contract enforces the access control rules specified in a trusted contract, especially if the dApp client-side access control is present (as the client-side access control can be easily bypassed). |
2121
| **2.5** | Verify that there is a centralized mechanism for protecting access to each type of protected resource. |
2222
| **2.6** | Verify that the calls to external contracts are allowed only if necessary. |

0 commit comments

Comments
 (0)