-
Notifications
You must be signed in to change notification settings - Fork 48
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fa2.py update_operators permissions issue #8
Comments
usually a batch operation is sent with allow, transfer and revoke operator |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
objkt-swap/smart-py/fa2.py
Line 501 in 1d2ad69
The update_operators() endpoint - checks if the owner == sender for a given objkt_id or if the sender is an admin.
However I'm not able to see a check which actually checks the bigMap to see if the sender is actually owns the objkt.
Is it possible to call the contract endpoint (Fa2.update_operators()) directly using custom UI or Taquito and add oneself as the operator to any arbitrary objkt ?
If I'm missing something in terms of understanding the flow, please do let me know
The text was updated successfully, but these errors were encountered: