Problem: control admin in the solidity code is not flexible

[thomas-nguy]

Currently only the owner can pause/unpause the contract.

We want to make it more flexible so that only some special addresses can have access to those functionalities
( needed for the circuit breaker)

[FinnZhangCrypto]

Checked the new changes on admin roles. Looks good to me. See if @brianatcrypto have any comments?
There is one question from my side, in production environment, the whitelist access of deployERC20 is only can be grated to token project side and our side right? No external side can get this access right?

[thomas-nguy]

Yes, I have added the whitelist guard to deployERC20

Whitelist are addresses that are able to relay (submit batches) but we can extend it now to also those who can deploy cosmos erc20.

At anytime, the whitelist can be turned off by setting anyoneCanRelay to true

I think it can add an extra security to prevent anyone to call this method (from recent bug) and since the address mapping in cronos is already permissioned, there is no use to make it public

[FinnZhangCrypto]

Thanks @thomas-nguy
The logic of switching on/off whitList makes sence to me!
And the maliciously deployed CosmosERC20 token cannot be recognized/acknowledged forever right?

[FinnZhangCrypto]

Looks good to me.

[calvinaco]

LGTM but I will leave solidity expertise to approve the code.