Security & Role Management

Role-Based Access Control

The Spree Factory implements role-based access control:

Role	Permissions	Typical Assignment
manager	Whitelist management, rate configuration	Partner ops team
executor	Finalize redemption requests	Partner backend
freezer	Pause/unpause contract operations	Security team

Grant Role

PUT /api/v1/build/evm/chain/{chainId}/factory/{factoryAddr}/role/{roleType}

Request Body:

{
  "input": {
    "userAddress": "0xRoleGrantedDestinationAddress"
  },
  "key": "0xRoleAdminAddress"
}

Where roleType is one of: freezer, manager, executor

Revoke Role

DELETE /api/v1/build/evm/chain/{chainId}/factory/{factoryAddr}/role/{roleType}

Check Role (Read-Only)

GET /api/v1/evm/chain/{chainId}/factory/{factoryAddr}/role/{roleType}/user/{userAddr}

Freeze/Unfreeze Operations

Freeze Contract:

POST /api/v1/build/evm/chain/{chainId}/factory/{factoryAddr}/freeze

Unfreeze Contract:

POST /api/v1/build/evm/chain/{chainId}/factory/{factoryAddr}/unfreeze

Check Freeze Status:

GET /api/v1/evm/chain/{chainId}/factory/{factoryAddr}/freezed