From cea1b45aff049768ff1ee7171f2b6cbee38898c0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bla=C5=BE=20Hrastnik?= <blaz@mxxn.io>
Date: Sat, 8 Oct 2022 01:08:38 +0900
Subject: [PATCH] fix: Add in access control on SetAccessController

---
 contracts/programs/ocr2/src/context.rs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/contracts/programs/ocr2/src/context.rs b/contracts/programs/ocr2/src/context.rs
index e367c4c26..bef86fced 100644
--- a/contracts/programs/ocr2/src/context.rs
+++ b/contracts/programs/ocr2/src/context.rs
@@ -133,6 +133,7 @@ pub struct Transmit<'info> {
 pub struct SetAccessController<'info> {
     #[account(mut)]
     pub state: AccountLoader<'info, State>,
+    #[account(address = state.load()?.config.owner @ ErrorCode::Unauthorized)]
     pub authority: Signer<'info>,
     pub access_controller: AccountLoader<'info, AccessController>,
 }