Hawk High

After the Smart Contract has been Upgraded to level two the function graduate( ) in level two has no access control on who can call it , therefore anyone can call the function and graduate the whole class

Vulnerability Details

This Access Control Vulnerability may cause anyone in the Hawk School to be able to call the graduate( ) function and graduate the School and even lead to loss of funds in the bursary , as it is not be the principal who may call the function

Tools Used are Visual Studio Code

Recommendations are that the access control should be introduced in the second smart contract of level two like the level one smart contract and making sure that the graduate( ) function can only be called by the Schools Principal ...