diff --git a/bsip-0040.md b/bsip-0040.md index 9255b71..70f2518 100644 --- a/bsip-0040.md +++ b/bsip-0040.md @@ -222,12 +222,20 @@ Exemplatory outcomes: - Transfer asset X with amount Y from account A to account C, signed with Key K: Denied - Transfer asset X with amount Y from account A to account B, signed with active authority of B: Denied - Transfer asset X with amount Y from account A to account B, signed with active authority of A: Accepted -- Create a proposal that includes operation 'transfer asset X with amount Y from account A to account B', signed with Key K: Accepted. Anyone can create a proposal. +- Create a proposal that includes operation 'transfer asset X with amount Y from account A to account B, signed with Key K: Accepted. Anyone can create a proposal. Note: - This is included with the first Milestone - Normal permission logic is not altered. Account A can still sign the a transfer from account A to account B with its active authority +#### Involving multi-sig + +Account A has multi-sig active authority of account B and C. Account A has a custom active authority that grants key K transfer priviliges (any asset to any account). Account B has a custom active authority that grants key L transfer priviliges (any asset to any account). + +The transaction contains a transfer from A to account D. Required active authority of this operation is A. +- Signed by B and C: Accepted +- Signed by L and C: Denied. The custom active authority of B does not match, only applies for transfers with B as sender +- Signed by K: Accepted, basically bypassing multisig. This is intended, as the multisig needs to approve the installment of the custom active authority in the first place #### Example: Either or Assume account A, B and C and asset X and asset Y. The custom active authority should now achieve