Aave V3 ACL Manager Contract

The Access Control List Manager (ACLManager) is the main registry of system roles and permissions.

The Aave Protocol implements an access control list to segregate powers and/or benefits that can be allocated to different entities on the protocol. The ACL_MANAGER contract is managed by the PoolAddressesProvider contract.

ACLManager keeps track of the individual roles and its holders, and allows a Role Admin to manage roles. Role Admin is itself a role that is managed by the DEFAULT_ADMIN_ROLE.

The DEFAULT_ADMIN_ROLE is held by the ACL_ADMIN, and should be initialized in the PoolAddressesProvider beforehand.

The source code is available on GitHub.

Roles

Below we outline the responsibilities/powers of the roles and the specific methods that are only accessible to the holders of these roles.

The FLASH_BORROWER and BRIDGE roles have few direct responsibilities and can primarily access specific features of the protocol, while ADMIN roles have the power and responsibility to handle risk or configuration parameters.

FLASH_BORROWER

Holders of this role will have the premium on flash loans waived (this does not include the simple flash loan).

Methods Accessible:

Pool:

• flashLoan()

BRIDGE

Deprecated. Since Aave V3.4 this role grants no access: mintUnbacked() and backUnbacked() were removed from the Pool. ACLManager still exposes BRIDGE_ROLE, addBridge(), removeBridge() and isBridge().

ASSET_LISTING_ADMIN

Holders of this role can:

• Update asset oracle sources and the fallback oracle.
• Add new assets to the Aave market.

Methods Accessible:

AaveOracle:

• setAssetSources()
• setFallbackOracle()

PoolConfigurator:

• initReserves()

RISK_ADMIN

Holders of this role can:

• Update reserve parameters such as reserve factor, caps, E-Mode category, borrowing enabled, freeze/unfreeze, LTV, liquidation threshold, liquidation bonus (cannot pause/unpause or activate/deactivate a reserve).
• Create new and update existing E-Mode categories (not category 0), including their isolated flag.
• Update the liquidation protocol fee.

Methods Accessible:

PoolConfigurator:

• setReserveBorrowing()
• configureReserveAsCollateral()
• setReserveFreeze()
• setReserveFactor()
• setBorrowCap()
• setSupplyCap()
• setLiquidationProtocolFee()
• setEModeCategory()
• setAssetCollateralInEMode()
• setAssetBorrowableInEMode()
• setEModeCategoryIsolated()
• setReserveLtvzero()
• setAssetLtvzeroInEMode()
• setReserveInterestRateData()
• setReserveFlashLoaning()

ACL_ADMIN

Holders of this role manage the role admins in the ACLManager. The DEFAULT_ADMIN_ROLE is held by the ACL_ADMIN, and should be initialized in the PoolAddressesProvider beforehand.

Methods Accessible:

ACLManager:

• setRoleAdmin()
• addPoolAdmin()
• removePoolAdmin()
• addEmergencyAdmin()
• removeEmergencyAdmin()
• addRiskAdmin()
• removeRiskAdmin()
• addFlashBorrower()
• removeFlashBorrower()
• addBridge()
• removeBridge()
• addAssetListingAdmin()
• removeAssetListingAdmin()

EMERGENCY_ADMIN

Holders of this role can pause and unpause the pool or an individual reserve.

Methods Accessible:

PoolConfigurator:

• setReservePause()
• setPoolPause()
• setReserveFreeze()
• disableLiquidationGracePeriod()
• setEModeCategoryIsolated()
• setReserveLtvzero()
• setAssetLtvzeroInEMode()

POOL_ADMIN

Holders of this role can update token implementations, (un)pause and (de)activate reserves, update premiums along with everything the ASSET_LISTING_ADMIN and RISK_ADMIN can do.

All deployers have resigned their POOL_ADMIN roles. All instances of the POOL_ADMIN role, across all V3 networks, are now governed by the Guardians multisig or by the Governance Bridge executors.

Methods Accessible:

All methods accessible to ASSET_LISTING_ADMIN.

All methods accessible to RISK_ADMIN.

AToken:

• rescueTokens()

Pool:

• rescueTokens()

PoolConfigurator:

• updateAToken()
• updateVariableDebtToken()
• setReserveActive()
• updateFlashloanPremium()
• setReserveInterestRateData()

Write Methods

setRoleAdmin

function setRoleAdmin(bytes32 role, bytes32 adminRole) external override onlyRole(DEFAULT_ADMIN_ROLE)

Sets adminRole as the admin of role. By default, the adminRole for all roles is DEFAULT_ADMIN_ROLE.

Input Parameters:

addPoolAdmin

function addPoolAdmin(address admin) external override

Adds a new admin as Pool Admin. The address is added to the list of members with the POOL_ADMIN role. Holders of this role can update token implementations, (un)pause and (de)activate reserves, update premiums and do everything the ASSET_LISTING_ADMIN and RISK_ADMIN can do.

Input Parameters:

removePoolAdmin

function removePoolAdmin(address admin) external override

Removes an admin as Pool Admin. The given address is removed from the list of members with the POOL_ADMIN role.

Input Parameters:

addEmergencyAdmin

function addEmergencyAdmin(address admin) external override

Adds a new admin as an Emergency Admin. The address is added to the list of members with the EMERGENCY_ADMIN role. Holders of this role can pause and unpause the pool or an individual reserve.

Input Parameters:

removeEmergencyAdmin

function removeEmergencyAdmin(address admin) external override

Removes an admin as Emergency Admin. The given address is removed from the list of members with the EMERGENCY_ADMIN role.

Input Parameters:

addRiskAdmin

function addRiskAdmin(address admin) external override

Adds a new admin as a Risk Admin. The address is added to the list of members with the RISK_ADMIN role. Holders of this role can update reserve params, liquidation fee and E-Mode categories.

Input Parameters:

removeRiskAdmin

function removeRiskAdmin(address admin) external override

Removes an admin as Risk Admin. The given address is removed from the list of members with the RISK_ADMIN role.

Input Parameters:

addFlashBorrower

function addFlashBorrower(address borrower) external override

Adds a new borrower address as Flash Borrower. The address is added to the list of members with the FLASH_BORROWER role. Holders of this role do not pay premium for flash loan (does not apply to flashLoanSimple).

Input Parameters:

removeFlashBorrower

function removeFlashBorrower(address borrower) external override

Removes borrower as Flash Borrower. The given borrower address is removed from the list of members with the FLASH_BORROWER role.

Input Parameters:

addAssetListingAdmin

function addAssetListingAdmin(address admin) external override

Adds a new admin as Asset Listing Admin. The address is added to the list of members with the ASSET_LISTING_ADMIN role. Holders of this role can update oracles and add new assets to the Aave market.

Input Parameters:

removeAssetListingAdmin

function removeAssetListingAdmin(address admin) external override

Removes an admin as Asset Listing Admin. The given address is removed from the list of members with the ASSET_LISTING_ADMIN role.

Input Parameters:

View Methods

isPoolAdmin

function isPoolAdmin(address admin) external view override returns (bool)

Returns true if the address has the POOL_ADMIN role, false otherwise.

Input Parameters:

Return Values:

isEmergencyAdmin

function isEmergencyAdmin(address admin) external view override returns (bool)

Returns true if the address has the EMERGENCY_ADMIN role, false otherwise.

Input Parameters:

Return Values:

isRiskAdmin

function isRiskAdmin(address admin) external view override returns (bool)

Returns true if the address has the RISK_ADMIN role, false otherwise.

Input Parameters:

Return Values:

isFlashBorrower

function isFlashBorrower(address borrower) external view override returns (bool)

Returns true if the address has the FLASH_BORROWER role, false otherwise.

Input Parameters:

Return Values:

isBridge

function isBridge(address bridge) external view override returns (bool)

Returns true if the address has BRIDGE role, false otherwise.

Input Parameters:

Return Values:

isAssetListingAdmin

function isAssetListingAdmin(address admin) external view override returns (bool)

Returns true if the address has the ASSET_LISTING_ADMIN role, false otherwise.

Input Parameters:

Return Values: