ensure that the authorizer only lets the caller pass

Signed-off-by: stadolf <[email protected]>

Author: elmariachi111

src/IPNFT.sol

@@ -23,7 +23,7 @@ import { IReservable } from "./IReservable.sol";
  \▓▓▓▓▓▓\▓▓             \▓▓   \▓▓\▓▓         \▓▓
  */
 
-/// @title IPNFT V2.4
+/// @title IPNFT V2.5
 /// @author molecule.to
 /// @notice IP-NFTs capture intellectual property to be traded and synthesized
 contract IPNFT is ERC721URIStorageUpgradeable, ERC721BurnableUpgradeable, IReservable, UUPSUpgradeable, OwnableUpgradeable, PausableUpgradeable {
@@ -188,7 +188,6 @@ contract IPNFT is ERC721URIStorageUpgradeable, ERC721BurnableUpgradeable, IReser
         (bool success,) = _msgSender().call{ value: address(this).balance }("");
         require(success, "transfer failed");
     }
-
 
     /// @inheritdoc UUPSUpgradeable
     function _authorizeUpgrade(address /*newImplementation*/ )

test/IPNFT.t.sol

@@ -229,6 +229,11 @@ contract IPNFTTest is IPNFTMintHelper {
         (uint8 v, bytes32 r, bytes32 s) = vm.sign(deployerPk, authMessageHash);
         bytes memory authorization = abi.encodePacked(r, s, v);
 
+        //the signoff only allows alice to call this
+        vm.startPrank(charlie);
+        vm.expectRevert(IPNFT.Unauthorized.selector);
+        ipnft.amendMetadata(1, "ipfs://QmNewUri", authorization);        
+
         vm.startPrank(alice);
         vm.expectEmit(true, true, false, false);
         emit MetadataUpdate(1);