Implement comprehensive access control with role-based permissions

[Smartdevs17]

Implement comprehensive access control with role-based permissions

Description

Context: Different users (merchants, subscribers, auditors, system admins) need different levels of access to subscription operations.

Current Limitation: Access control is minimal with only basic authorization checks, lacking granular permission management.

Expected Outcome: Implement a comprehensive role-based access control (RBAC) system with customizable roles, permissions, and permission inheritance.

Acceptance Criteria

• Define roles: Merchant, Subscriber, Auditor, Admin with corresponding permissions
• Implement RoleManager contract with role assignment and revocation
• Add permission checks to all sensitive contract functions
• Support role hierarchies (admin inherits all permissions)
• Add permission delegation with limited scope and time
• Implement multi-signature requirements for high-value operations
• Add role change history for audit purposes
• Create React Native UI for role management
• Write tests for all permission scenarios

Technical Scope

Files Likely Affected:

• contracts/access_control/src/lib.rs - New access control module
• contracts/access_control/src/roles.rs - Role definitions
• contracts/subscription/src/lib.rs - Updated authorization

APIs/Contracts Involved:

• grant_role(user: Address, role: Role)
• revoke_role(user: Address, role: Role)
• has_permission(user: Address, permission: Permission) -> bool
• delegate_permission(user: Address, permission: Permission, delegate: Address, duration: u64)

Edge Cases to Consider:

• Role revocation while delegation is active
• Circular role dependencies
• Emergency access (kill switch)
• Role assignment during contract upgrade

[Joeltabe]

@Joeltabe has applied to work on this issue as part of the Stellar Wave Program's 4th wave.

Please can I work on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Joeltabe to this issue.

[activatedkc]

@activatedkc has applied to work on this issue as part of the Stellar Wave Program's 5th wave.

Hello,

I am a smart contract and full-stack developer interested in contributing to this issue. I am experienced with hands-on experience in Rust, Soroban, Go, Cairo, Solidity, and TypeScript.

I am passionate about building secure and scalable blockchain solutions, with a strong focus on writing clean, maintainable code. Based on the scope of this issue, I am confident I can deliver a complete solution within 24 hours of assignment.

I would appreciate the opportunity to contribute and help move this forward.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @activatedkc to this issue.

[drips-wave]

Congratulations, @activatedkc! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on June 2, 2026.

🧑‍💻 @activatedkc: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊

[drips-wave]

This issue has been completed by @activatedkc as part of the Stellar Wave Program's 5th Wave 🥳

😎 @activatedkc: You earned 200 Points for completing this issue! After the current Wave ends, you'll be eligible for a percentage of the Wave's reward pool based on the percentage of total points you've earned. Learn more here. You can also Leave a review to share your experience working on this issue.

🧑‍💻 Repo maintainers: How'd the contributor do? Leave a review to share your experience working with them.