AccessControlContract

📋 Contract Overview

Property	Value
📁 File	src/AccessControlContract.sol
🔧 Type	Upgradeable UUPS Proxy
⚙️ Solidity	0.8.33
📜 License	MIT

🎯 Purpose: Centralized role management for the entire Built By DAO contract ecosystem—defining permissions, managing role hierarchies, and coordinating access control.

---

⚙️ Specifications

⚙️ Technical Specifications

Property	Value
🔄 Upgradeable	✅ Yes (UUPS Proxy)
⏱️ Default Timelock	48 hours

Inherits From

• Initializable

• AccessControlEnumerableUpgradeable

• UUPSUpgradeable

🔐 Multi-sig

⏱️ Timelock

---

🏛️ Role Hierarchy

DEFAULT_ADMIN_ROLE
├── GOVERNANCE_ROLE
│   ├── Execute approved proposals
│   └── Manage governance parameters
├── TREASURY_ROLE
│   ├── Withdraw from treasury
│   └── Manage treasury tokens
├── MINTER_ROLE
│   ├── Mint BLTBY (within limits)
│   └── Mint NFTs
├── CONFIG_ROLE
│   └── Update contract configurations
├── PROPERTY_MANAGER_ROLE
│   └── Manage properties and leases
├── KYC_ROLE
│   └── Approve/revoke KYC status
├── ORACLE_ROLE
│   └── Update price data
└── PAUSER_ROLE
    └── Pause/unpause contracts

---

🎖️ Role Definitions

🏛️ Governance

🏛️ GOVERNANCE_ROLE

Permissions:

• Execute approved governance proposals

• Call restricted functions on target contracts

• Emergency governance actions

Holders:

• Governance contract

• Multi-sig for emergencies

🏦 Treasury

🔧 Minter

⚙️ Config

📋 Others

---

🔧 Functions

🔐 Roles

🔐 Role Management

Grant Role

function grantContractRole(
    bytes32 role,
    address account
) external onlyRole(getRoleAdmin(role))

Revoke Role

function revokeContractRole(
    bytes32 role,
    address account
) external onlyRole(getRoleAdmin(role))

Request Timelocked Change

function requestRoleChange(
    bytes32 role,
    address account,
    bool isGrant
) external onlyRole(getRoleAdmin(role)) returns (bytes32 changeId)

Execute Change

function executeRoleChange(bytes32 changeId) external

📋 Registry

👁️ View

---

📜 Events & Errors

📢 Events

event RoleGranted(
    bytes32 indexed role,
    address indexed account,
    address indexed sender
);
event RoleRevoked(
    bytes32 indexed role,
    address indexed account,
    address indexed sender
);
event RoleChangeRequested(
    bytes32 indexed changeId,
    bytes32 indexed role,
    address indexed account,
    bool isGrant
);
event RoleChangeExecuted(bytes32 indexed changeId);
event ContractRegistered(address indexed contractAddress, string name);
event ContractUnregistered(address indexed contractAddress);

⛔ Errors

---

🔒 Security Patterns

🔀 Separation

🔀 Role Separation

No single account should hold multiple sensitive roles.

Role Conflict	Blocked
TREASURY + GOVERNANCE	✅
MINTER + TREASURY	✅

🔄 Rotation

---

🔗 Contract Interactions

Contract	Interaction
📋 All contracts	Query role permissions
⚖️ Governance	Executes role changes via proposals
🔐 Multi-sig	Approves sensitive changes

---

💻 Integration Examples

Checking Permissions

const hasGovernance = await accessControl.hasContractRole(
    ethers.utils.id("GOVERNANCE_ROLE"),
    accountAddress
);

Granting Role (Timelocked)

// Request role change
const tx = await accessControl.requestRoleChange(
    ethers.utils.id("CONFIG_ROLE"),
    newAdminAddress,
    true  // isGrant
);

// Wait for timelock (48 hours)...

// Execute change
await accessControl.executeRoleChange(changeId);

Listing Role Members

const treasuryRoleMembers = await accessControl.getRoleMembers(
    ethers.utils.id("TREASURY_ROLE")
);

---

🔗 Related Pages

GovernanceTreasurySecurity