Description
The PositionSource struct in FlowALPPositionResources.cdc has an access(all) constructor (init), meaning anyone can construct a PositionSource if they have the required capability. This constructor should be restricted to prevent unauthorized construction.
Context
Discussion thread: https://flow-foundation.slack.com/archives/C08QF29F7TK/p1774553713378439
Location
cadence/contracts/FlowALPPositionResources.cdc, line 416: access(all) struct PositionSource
Description
The
PositionSourcestruct inFlowALPPositionResources.cdchas anaccess(all)constructor (init), meaning anyone can construct aPositionSourceif they have the required capability. This constructor should be restricted to prevent unauthorized construction.Context
Discussion thread: https://flow-foundation.slack.com/archives/C08QF29F7TK/p1774553713378439
Location
cadence/contracts/FlowALPPositionResources.cdc, line 416:access(all) struct PositionSource