Christmas Dinner

Summary

Potential flaw in the changeHost function

Vulnerability Details

-The changeHost function lacks a check to prevent assignment of a host role to a user who was previously a host.
-This can lead to confusion arising from unclear host account permissions and rights.

Impact

-Potential misuse of the contract due to mismanagement of roles.
-Contract security may be compromised leading to unauthorized handling.

Tools Used

Static code analysis, Automated audit tools

Recommendations

-Introduce a preventive check in changeHost function to avoid re-assigning host role to the same user.
-Consider integrating role-based access control for streamlined authorization management.