feat: contributor acc verification

Author: ANISH-SR

smartcontract/programs/doublezero-serviceability/src/processors/link/closeaccount.rs

@@ -83,6 +83,9 @@ pub fn process_closeaccount_link(
     let mut side_a_dev = Device::try_from(side_a_account)?;
     let mut side_z_dev = Device::try_from(side_z_account)?;
     let link: Link = Link::try_from(link_account)?;
+    if link.contributor_pk != *contributor_account.key {
+        return Err(DoubleZeroError::NotAllowed.into());
+    }
 
     if link.owner != *owner_account.key {
         return Err(ProgramError::InvalidAccountData);

smartcontract/programs/doublezero-serviceability/src/processors/link/delete.rs

@@ -65,14 +65,18 @@ pub fn process_delete_link(
 
     let contributor = Contributor::try_from(contributor_account)?;
 
-    if contributor.owner != *payer_account.key
-        && !globalstate.foundation_allowlist.contains(payer_account.key)
-    {
+    let payer_in_foundation = globalstate.foundation_allowlist.contains(payer_account.key);
+
+    if contributor.owner != *payer_account.key && !payer_in_foundation {
         return Err(DoubleZeroError::InvalidOwnerPubkey.into());
     }
 
     // Any link can be deleted by its contributor or foundation allowlist on any status
     let mut link: Link = Link::try_from(link_account)?;
+    if !payer_in_foundation && link.contributor_pk != *contributor_account.key {
+        return Err(DoubleZeroError::NotAllowed.into());
+    }
+
     link.status = LinkStatus::Deleting;
 
     account_write(link_account, &link, payer_account, system_program)?;

smartcontract/programs/doublezero-serviceability/src/processors/link/resume.rs

@@ -63,14 +63,18 @@ pub fn process_resume_link(
     let globalstate = globalstate_get(globalstate_account)?;
     let contributor = Contributor::try_from(contributor_account)?;
 
-    if contributor.owner != *payer_account.key
-        && !globalstate.foundation_allowlist.contains(payer_account.key)
-    {
+    let payer_in_foundation = globalstate.foundation_allowlist.contains(payer_account.key);
+
+    if contributor.owner != *payer_account.key && !payer_in_foundation {
         return Err(DoubleZeroError::InvalidOwnerPubkey.into());
     }
 
     let mut link: Link = Link::try_from(link_account)?;
 
+    if !payer_in_foundation && link.contributor_pk != *contributor_account.key {
+        return Err(DoubleZeroError::NotAllowed.into());
+    }
+
     if link.status != LinkStatus::Suspended {
         return Err(DoubleZeroError::InvalidStatus.into());
     }

smartcontract/programs/doublezero-serviceability/src/processors/link/suspend.rs

@@ -63,13 +63,16 @@ pub fn process_suspend_link(
     let globalstate = globalstate_get(globalstate_account)?;
     let contributor = Contributor::try_from(contributor_account)?;
 
-    if contributor.owner != *payer_account.key
-        && !globalstate.foundation_allowlist.contains(payer_account.key)
-    {
+    let payer_in_foundation = globalstate.foundation_allowlist.contains(payer_account.key);
+
+    if contributor.owner != *payer_account.key && !payer_in_foundation {
         return Err(DoubleZeroError::InvalidOwnerPubkey.into());
     }
 
     let mut link: Link = Link::try_from(link_account)?;
+    if !payer_in_foundation && link.contributor_pk != *contributor_account.key {
+        return Err(DoubleZeroError::NotAllowed.into());
+    }
 
     if link.status != LinkStatus::Activated {
         #[cfg(test)]