Buy RAM for self buyramself ACTION

[DenisCarriere]

Purpose

Create buyramself ACTION where you can’t buyram for someone else.

Allows a smart contract to linkauth permission to buyramself thus preventing sending RAM outside of the custody of the smart contract or personal account, it would only be able to purchase RAM for itself.

buyram and buyrambytes can be a risk for contracts since it allows to transfer EOS outside of the account, essentially acting as a proxy for eosio.token::transfer.

Feedback provided by

• @DenisCarriere
• @aaroncox
• @nsjames

buyramself ACTION

/**
 * Buy ram action for self, increases receiver's ram quota.
 * An inline transfer from receiver to system contract of tokens will be executed.
 *
 * @param owner - the ram buyer & receiver,
 * @param bytes - (optional) the quantity of ram to buy specified in bytes.
 * @param quantity - (optional) the quantity of tokens to buy ram with.
 */
[[eosio::action]]
void buyramself( const name& owner, const optional<asset> quantity, const optional<uint32_t> bytes );

Preconditions

• require_auth(owner)
• must provide values for either quantity or bytes
  • throw error if both are provided
  • throw error if none are provided
• if bytes is provided, internally use buyrambytes action
• if quantity is provided, internally use buyram action

[aaroncox]

Adding a return value to indicate the amount of RAM purchased (which is very useful when using the quantity field) would be a welcome addition too!

I think we talked about that for the modifications to buyram as well. It could just mirror that.

[DenisCarriere]

• Modify action params to only provide quantity as param, keep it consistent with buyram
• Update description

/**
 * The buyramself action is designed to enhance the permission security by allowing an account to purchase RAM exclusively for itself.
 * This action prevents the potential risk associated with standard actions like buyram and buyrambytes,
 * which can transfer EOS tokens out of the account, acting as a proxy for eosio.token::transfer.
 *
 * @param account - the ram buyer and receiver,
 * @param quantity - the quantity of tokens to buy ram with.
 */
[[eosio::action]]
void buyramself( const name& account, const asset& quantity );

[ericpassmore]

closed with PR