《纸上谈兵·solidity》第 17 课：合约设计模式实战（二）—— Access Control 与权限管理

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

import "@openzeppelin/contracts/access/Ownable.sol";

contract Treasury is Ownable {
    uint256 public funds;

    function deposit() external payable {
        funds += msg.value;
    }

    // 只有 owner 才能提款
    function withdraw(address payable to, uint256 amount) external onlyOwner {
        require(amount <= funds, "Not enough funds");
        funds -= amount;
        to.transfer(amount);
    }
}

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

import "@openzeppelin/contracts/access/AccessControl.sol";

contract TokenWithRoles is AccessControl {
    bytes32 public constant MINTER_ROLE = keccak256("MINTER_ROLE");

    constructor() {
        _grantRole(DEFAULT_ADMIN_ROLE, msg.sender); // 部署者是管理员
    }

    function mint(address to, uint256 amount) external onlyRole(MINTER_ROLE) {
        // 执行铸币逻辑
    }
}

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

import "@openzeppelin/contracts/access/Ownable.sol";
import "@openzeppelin/contracts/access/AccessControl.sol";

contract Vault is Ownable, AccessControl {
    bytes32 public constant WITHDRAW_ROLE = keccak256("WITHDRAW_ROLE");

    uint256 public funds;

    constructor() Ownable(msg.sender){
        _grantRole(DEFAULT_ADMIN_ROLE, msg.sender);
    }

    function deposit() external payable {
        funds += msg.value;
    }

    // 使用角色控制提款
    function withdraw(address payable to, uint256 amount) external onlyRole(WITHDRAW_ROLE) {
        require(amount <= funds, "Not enough funds");
        funds -= amount;
        to.transfer(amount);
    }
}

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

import "forge-std/Test.sol";
import "../src/Vault.sol";

contract AccessControlTest is Test {
    Vault vault;
    address alice = makeAddr("alice");
    address bob = makeAddr("bob");

    function setUp() public {
        vault = new Vault();
        vm.deal(address(this), 10 ether);
        vault.deposit{value: 5 ether}();
    }

    function testUnauthorizedWithdrawFails() public {
        vm.prank(bob);
        vm.expectRevert(); // bob 没有权限
        vault.withdraw(payable(bob), 1 ether);
        
        assertEq(bob.balance, 0 ether);
    }

    function testGrantRoleAndWithdraw() public {
        // 授权 alice
        vault.grantRole(vault.WITHDRAW_ROLE(), alice);

        vm.prank(alice);
        vault.withdraw(payable(alice), 1 ether);

        assertEq(alice.balance, 1 ether);
    }
}

# 如果没有安装 openzepplin ，需要先安装
➜  tutorial git:(main) ✗ forge install OpenZeppelin/openzeppelin-contracts
➜  tutorial git:(main) ✗ forge test --match-path test/AccessControl.t.sol -vvv

[⠊] Compiling...
[⠒] Compiling 1 files with Solc 0.8.30
[⠑] Solc 0.8.30 finished in 525.35ms
Compiler run successful!

Ran 2 tests for test/AccessControl.t.sol:AccessControlTest
[PASS] testGrantRoleAndWithdraw() (gas: 81767)
[PASS] testUnauthorizedWithdrawFails() (gas: 14751)
Suite result: ok. 2 passed; 0 failed; 0 skipped; finished in 9.24ms (3.14ms CPU time)

Ran 1 test suite in 169.06ms (9.24ms CPU time): 2 tests passed, 0 failed, 0 skipped (2 total tests)