Beanstalk Part 2

Summary

The mintFertilizer function is intended to be callable by anyone, but internally it calls the beanstalkMint function, which has onlyOwner access control. This discrepancy in access control will cause the mintFertilizer function to fail when called by anyone other than the owner.

Impact

The lack of proper access control in the mintFertilizer function prevents non-owner accounts from successfully calling the function, leading to restricted functionality and potential user frustration. This can hinder the intended use of the contract and limit participation.

Tools Used

Manual review

Recommendations

Review the access control logic in the beanstalkMint function and ensure that it aligns with the intended functionality of the mintFertilizer function. Consider modifying the access control mechanism to allow the mintFertilizer function to be called by anyone as intended. This can involve removing the onlyOwner modifier from the beanstalkMint function or implementing a different access control mechanism that accommodates the intended behavior of mintFertilizer.