Authorization

Authorization is crucial to a world, just like how authorization is crucial to any smart contract.

As discussed in the theory chapter, Autonomous Worlds (AWs) function as sovereign chains nested within a public blockchain. These Worlds are also open to the public. This structure allows anyone to enhance a World by deploying models or systems. However, this openness also introduces security considerations. Similar to Ethereum, interacting with a model's state within a system requires the appropriate authorization from the model owner.

Permissions

In Dojo, the following permissions are available:

• writer: The ability to update the state of a resource.
• owner: The ownership of a resource. The owner has the ability to grant or revoke other permissions (including owner) on a resource.

Auth Architecture

In order to write data into the world, in other term to update the state of a model, a system must have the appropriate authorization.

In Dojo, to write data to the world the set! macro is used.

Every time a set! is called, the world checks if the system has authorization to update the model state. First the writer permission is checked, and then the owner permission.

Only when the system possesses the necessary authorization, the set! is executed. The following diagram illustrates the authorization architecture.

Providing Authorization

The world APIs contains the following functions associated with authorization:

fn is_owner(self: @T, address: ContractAddress, resource: felt252) -> bool;
fn grant_owner(ref self: T, address: ContractAddress, resource: felt252);
fn revoke_owner(ref self: T, address: ContractAddress, resource: felt252);
 
fn is_writer(self: @T, model: felt252, contract: ContractAddress) -> bool;
fn grant_writer(ref self: T, model: felt252, contract: ContractAddress);
fn revoke_writer(ref self: T, model: felt252, contract: ContractAddress);

To provide authorization you have multiple choices:

• Using Sozo auth command to set permissions from the command line.
• Leveraging the overlay system to set permissions automatically when you migrate your project. (TODO: PAGE + LINK).