rework init sec policy

vacuumlabs · Oct 25, 2021 · cbf7b52 · cbf7b52
1 parent ace2e6b
commit cbf7b52
Showing 1 changed file with 12 additions and 1 deletion.
diff --git a/src/securityPolicy.c b/src/securityPolicy.c
@@ -557,13 +557,24 @@ security_policy_t policyForSignTxStakePoolRegistrationInit(
 	case SIGN_TX_SIGNINGMODE_POOL_REGISTRATION_OWNER:
 		// there should be exactly one owner given by path for which we provide a witness
 		DENY_IF(numOwners == 0);
+		ALLOW();
+		break;
+
+	case SIGN_TX_SIGNINGMODE_POOL_REGISTRATION_OPERATOR:
+		ALLOW();
+		break;
+
+	case SIGN_TX_SIGNINGMODE_ORDINARY_TX:
+	case SIGN_TX_SIGNINGMODE_MULTISIG_TX:
+		DENY();
 		break;
 
 	default:
+		ASSERT(false);
 		break;
 	}
 
-	ALLOW();
+	DENY();
 }
 
 security_policy_t policyForSignTxStakePoolRegistrationPoolId(