From 552b5c4bfaf660f8ac4a076e7f559b57b12bd1b4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Stefan=20Schie=C3=9Fl?= Date: Tue, 7 Aug 2018 22:34:03 +0200 Subject: [PATCH] include multi-sig example --- bsip-0040.md | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/bsip-0040.md b/bsip-0040.md index 9255b71..70f2518 100644 --- a/bsip-0040.md +++ b/bsip-0040.md @@ -222,12 +222,20 @@ Exemplatory outcomes: - Transfer asset X with amount Y from account A to account C, signed with Key K: Denied - Transfer asset X with amount Y from account A to account B, signed with active authority of B: Denied - Transfer asset X with amount Y from account A to account B, signed with active authority of A: Accepted -- Create a proposal that includes operation 'transfer asset X with amount Y from account A to account B', signed with Key K: Accepted. Anyone can create a proposal. +- Create a proposal that includes operation 'transfer asset X with amount Y from account A to account B, signed with Key K: Accepted. Anyone can create a proposal. Note: - This is included with the first Milestone - Normal permission logic is not altered. Account A can still sign the a transfer from account A to account B with its active authority +#### Involving multi-sig + +Account A has multi-sig active authority of account B and C. Account A has a custom active authority that grants key K transfer priviliges (any asset to any account). Account B has a custom active authority that grants key L transfer priviliges (any asset to any account). + +The transaction contains a transfer from A to account D. Required active authority of this operation is A. +- Signed by B and C: Accepted +- Signed by L and C: Denied. The custom active authority of B does not match, only applies for transfers with B as sender +- Signed by K: Accepted, basically bypassing multisig. This is intended, as the multisig needs to approve the installment of the custom active authority in the first place #### Example: Either or Assume account A, B and C and asset X and asset Y. The custom active authority should now achieve