chuck-h / rainbowc Goto Github PK

Need to implement test suite

As of bfaacaf, creation of a new token requires authorization from both the issuer and the contract account. The required contract account permission is create_token_permission which is fixed at "active". Contract immutability can be obtained by burning the contract owner and active keys (e.g. setting them to eosio.null), but this prevents creation of any new tokens. Better to have a custom permission for token creation as anticipated in the variable name above.

We could initialize create_token_permission to "active", but use a boolean switch in a new action to switch to a dedicated permission. This way simpler applications don't need to worry about creating a new permission, but more sophisticated apps can do so.