Page History

Background

Iroha Special Instructions and Iroha Queries processing requires a permissions based security model.

...

1. Use Iroha 1 approach with roles and grantable permissions:
   1. `+` Out-of-the-Box permissions grouping by roles
   2.  `-` hardcoded permissions checks and additional low-level logic
2. Use assets, but do hardcoded permissions checks inside instructions
   1. `+` less client-side actions needed
   2. `-` no ability to clean genesis block  processing and configuration

Concerns

• Additional requirements to Iroha Special Instructions, Queries and Triggers will slow down development
• Additional high-level functionality would be needed to simulate "Roles"

Assumptions

• Iroha Triggers support pre-instruction hooks because it will be more effective to check permissions before instructions execution

Risks

• This solution will impact Iroha Triggers design `[9;6]`

Additional Information