Replying to Avatar PABLOF7z

Who built zapplepay?

If you enable nsecBunker support people will be able to have the zaps show up like them with a single permission on 9734 kind events
Avatar
armstrys 2y ago

I’m in instance like this it would be great if the client could explicitly not allow the nsecBunker to vice more permissions than it needs. Otherwise users are an accidental button click away from giving more permissions that would ever be needed!

Reply to this note

Please Login to reply.

Discussion

Avatar
PABLOF7z 2y ago

Yeah, that’s exactly what I’m saying:

You could authorize zapplepay to ONLY sign zap requests

All other signatures, encryption, decryption are rejected.

Avatar
armstrys 2y ago

And the admin panel wouldn’t even show an approve all kinds event?

Doesn’t it normally allow you to approve a single kind or everything? Or does that everything request have to be defined by the client request?

Avatar
PABLOF7z 2y ago

Right now it does but you’ll be able to say “never” for other events 👍