Method Level Access Controls
Auditor roles have read-only access to methods that use the extended Token Taxonomy Framework standard.
The following table shows how the administrator, auditor, and other roles affect access to methods in the extended Token Taxonomy Framework standard.
| Method name | Token Admin |
Token Auditor |
Org Admin |
Org Auditor |
Other |
|---|---|---|---|---|---|
addTokenAdmin |
Y | N | N | N | N |
removeTokenAdmin |
Y | N | N | N | N |
isTokenAdmin |
Y | Y | Y | Y | N |
getAllTokenAdmins |
Y | Y | Y | Y | N |
addOrgAdmin |
Y | N | Y (same organization) | N | N |
removeOrgAdmin |
Y | N | Y (same organization) | N | N |
getOrgAdmins |
Y | Y | Y | Y | N |
addTokenAuditor |
Y | N | N | N | N |
removeTokenAuditor |
Y | N | N | N | N |
getTokenAuditors |
Y | Y | Y | Y | N |
addOrgAuditor |
Y | N | Y | N | N |
removeOrgAuditor |
Y | N | Y | N | N |
getOrgAuditors |
Y | Y | Y | Y | N |
registerOrg |
Y | N | N | N | N |
deregisterOrg |
Y | N | N | N | N |
getAllRegisteredOrgs |
Y | Y | N | N | N |
init |
Y | N | N | N | N |
initialize<Token Name>Token |
Y | N | N | N | N |
update<Token Name>Token |
Y | N | N | N | N |
getTokenDecimals |
Y | Y | Y | Y | N |
getTokenById |
Y | Y | Y | Y | N |
getTokenHistory |
Y | Y | Y | Y | N |
getAllTokens |
Y | Y | Y | Y | N |
getTokensByName |
Y | Y | Y | Y | N |
createAccount |
Y | N | Y (same organization) | N | N |
associateTokenToAccount |
Y | N | Y (same organization) | N | N |
getAccount |
Y | Y | Y (same organization) | Y (same organization) | Any user on their own account only |
getAccountHistory |
Y | Y | Y (same organization) | Y (same organization) | Any user on their own account only |
getAccountOnHoldBalance |
Y | Y | Y (same organization) | Y (same organization) | Any user on their own account only |
getAllAccounts |
Y | Y | Y (same organization) | Y (same organization) | N |
getUserByAccountId |
Y | Y | Y (same organization) | Y (same organization) | N |
getAccountBalance |
Y | Y | Y (same organization) | Y (same organization) | Any user on their own account only |
getAllOrgAccounts |
Y | Y | Y (same organization) | Y (same organization) | N |
addRole |
Y | N | Y (same organization, must hold the same role) | N | N |
removeRole |
Y | N | Y (same organization, must hold the same role) | N | N |
getAccountsByRole |
Y | Y | Y (same organization) | Y (same organization) | N |
getAccountsByUser |
Y | Y | Y (same organization) | Y (same organization) | Any user on their own account only |
getUsersByRole |
Y | Y | Y (same organization) | Y (same organization) | N |
isInRole |
Y | Y | Y (same organization) | Y (same organization) | Any user on their own account only |
getOrgAccountsByRole |
Y | Y | Y | Y | N |
getOrgUsersByRole |
Y | Y | Y (same organization) | Y (same organization) | N |
getAccountTransactionHistoryWithFiltersFromRichHistDB |
Y | Y | Y (same organization) | Y (same organization) | Any user on their own account only |
getAccountTransactionHistory |
Y | Y | Y (same organization) | Y (same organization) | Any user on their own account only |
getAccountTransactionHistoryWithFilters |
Y | Y | Y (same organization) | Y (same organization) | Any user on their own account only |
getSubTransactionsById |
Y | Y | Y (same organization) | Y (same organization) | Any user on their own account only |
getSubTransactionsByIdWithFilters |
Y | Y | Y (same organization) | Y (same organization) | Any user on their own account only |
getTransactionById |
Y | Y | Y (same organization) | Y (same organization) | Transaction participant (sender, recipient, notary) |
deleteHistoricalTransactions |
Y | N | N | N | N |
requestMint |
N | N | N | N | Any user with the minter role |
approveMint |
N | N | N | N | Any user with the minter notary role |
rejectMint |
N | N | N | N | Any user with the minter notary role |
issueTokens |
N | N | N | N | Any user with the minter role |
getTotalMintedTokens |
Y | Y | Y | Y | N |
getNetTokens |
Y | Y | Y | Y | N |
transferTokens |
N | N | N | N | Any user with tokens |
bulkTransferTokens |
N | N | N | N | Any user with tokens |
holdTokens |
N | N | N | N | Any user with tokens |
executeHoldTokens |
N | N | N | N | The notary for the specified operation ID |
releaseHoldTokens |
N | N | N | N | The notary; also the the payer or payee after the hold time limit expires |
getOnHoldIds |
Y | Y | Y (same organization) | Y (same organization) | Any user on their own account only |
getOnHoldDetailsWithOperationId |
Y | Y | Y (same organization) | Y (same organization) | Transaction participant (sender, recipient, notary) |
getOnHoldBalanceWithOperationId |
Y | Y | Y (same organization) | Y (same organization) | Transaction participant (sender, recipient, notary) |
requestBurn |
N | N | N | N | Any user with the burner role |
approveBurn |
N | N | N | N | Any user with the burner notary role |
rejectBurn |
N | N | N | N | Any user with the burner notary role |
getAccountOnHoldBurnBalance |
Y | Y | Y | Y | Any user on their own account only |
burnTokens |
Y | Y | Y | Y | Any user with tokens |
initializeExchangePoolUser |
Y | N | N | N | N |
createExchangePoolAccounts |
Y | N | N | N | N |
addConversionRate |
Y | N | N | N | N |
getConversionRate |
Y | Y | Y | Y | Any token account owner |
updateConversionRate |
Y | N | N | N | N |
mintWithFundingExchangePool |
N | N | N | N | Any user with the minter role |
tokenConversion |
N | N | N | N | Any token account owner (but not an exchange pool user) |
getConversionHistory |
Y | Y | Y (same organization) | Y (same organization) | Any token account owner |
getConversionRateHistory |
Y | Y | Y | Y | Any token account owner |
getExchangePoolUser |
Y | Y | N | N | N |
getAccountStatus |
Y | Y | Y (same organization) | Y (same organization) | Any user on their own account only |
getAccountStatusHistory |
Y | Y | Y (same organization) | Y (same organization) | Any user on their own account only |
activateAccount |
Y | N | Y (same organization) | N | N |
suspendAccount |
Y | N | Y (same organization) | N | N |
deleteAccount |
Y | N | Y (same organization) | N | N |