update permission check

thirdweb-dev · Jan 9, 2024 · 7bb039b · 7bb039b
1 parent 0e623b1
commit 7bb039b
Showing 1 changed file with 19 additions and 0 deletions.
diff --git a/contracts/prebuilts/unaudited/checkout/prb/TargetCheckout.sol b/contracts/prebuilts/unaudited/checkout/prb/TargetCheckout.sol
@@ -35,12 +35,31 @@ contract TargetCheckout is IExecutor {
     }
 
     function execute(UserOp calldata op) external {
+        address owner = IPRBProxy(address(this)).owner();
+        if (owner != msg.sender) {
+            bool permission = IPRBProxy(address(this)).registry().getPermissionByOwner({
+                owner: owner,
+                envoy: msg.sender,
+                target: op.target
+            });
+            require(permission, "Not authorized");
+        }
         _execute(op);
     }
 
     function swapAndExecute(UserOp calldata op, SwapOp calldata swapOp) external {
         require(isApprovedRouter[swapOp.router], "Invalid router address");
 
+        address owner = IPRBProxy(address(this)).owner();
+        if (owner != msg.sender) {
+            bool permission = IPRBProxy(address(this)).registry().getPermissionByOwner({
+                owner: owner,
+                envoy: msg.sender,
+                target: op.target
+            });
+            require(permission, "Not authorized");
+        }
+
         _swap(swapOp);
         _execute(op);
     }