assert ASC or that the caller is the spender

massalabs · Jul 18, 2024 · 32c9455 · 32c9455
1 parent 349284d
commit 32c9455
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/smart-contract/assembly/internal.ts b/smart-contract/assembly/internal.ts
@@ -43,6 +43,14 @@ export function asyncSendFT(binaryArgs: StaticArray<u8>): void {
   const schedule = args
     .nextSerializable<Schedule>()
     .expect('Schedule is missing or invalid');
+
+  // assert ASC or that the caller is the spender
+  assert(
+    Context.callee() === Context.caller() ||
+      Context.caller() === new Address(schedule.spender),
+    'Unauthorized',
+  );
+
   // send token
   sendFT(schedule);