Author: filipv
Date: 2023-03-13

Synopsis#

1. Remove the operator permissions that JuiceboxDAO's multisig granted to JBMigrationOperator.
2. Set allowSetTerminals , allowSetController , allowTerminalMigration, and allowControllerMigration to false for the DAO’s v2 project (v2p1).

Context#

While executing JBP-341, the multisig had to grant several operator permissions to the JBMigrationOperator contract: MIGRATE_CONTROLLER, MIGRATE_TERMINAL, and SET_TERMINALS.

The multisig also had to set allowSetTerminals , allowSetController , allowTerminalMigration, and allowControllerMigration to true to facilitate versioning migrations.

There isn't any severe and immediate risk, but the multisig should remove these permissions.

Specification#

The multisig should call setOperator on JBOperatorStore with an operator of 0x004d50E8552f7E811E7DF913A3205ABf48E47b52 (the address of JBMigrationOperator), a domain of 1 (JuiceboxDAO's project), and no permissionIndexes.

The multisig should queue the next cycle for v2p1 with allowSetTerminals , allowSetController , allowTerminalMigration, and allowControllerMigration set to false.

Timeline#

To be executed within 30 days of this proposal's Snapshot ratification.