First Flight #16: Mafia Takedown

Description
The Laundrette Policy acts with the admin role within the framework however the function retrieveAdmin attempts to call a kernel function which requires the executor role.

The documentation states:

A function permit the godfather to retrieve the admin role when needed.

This function cannot be called successfully by the godFather.

Impact

The Laundrette:retrieveAdmin function cannot be called successfully to change the admin to the kernel executor.

Proof of Concept

Recommended mitigation
Review the need to perform this operation and consider creating separate Policy contracts and roles to keep the separation of concerns clean. Eg:

• Create a GodFather Policy

• Create a Admin Policy

• Create a GangMember Policy

• Create a PublicUser Policy

• Use individual roles for each of the different types of users

References
Review the documentation for the Framework:

• https://github.com/fullyallocated/Default

Tools Used

• Manual review

• Unit test