Whitelist and Access Control Contract

[Mkalbani]

Location: contracts/whitelist
Labels: smart-contract, soroban, good first issue
Estimated Time: 5 hours
Difficulty: Easy

Description

Create a whitelist contract managing access control for exclusive puzzles, events, and features with tiered permissions.

Tasks

• Design whitelist data structure with tiers
• Implement address whitelist addition/removal
• Add tier-based permission system
• Create batch whitelist operations
• Implement merkle tree for gas optimization
• Add whitelist verification function
• Create expiration dates for whitelist entries
• Write access control tests
• Add admin role management
• Implement whitelist snapshot functionality

Acceptance Criteria

• Addresses added/removed correctly
• Tier permissions enforced
• Merkle proofs verify efficiently
• Expirations handled properly
• Admin controls secure
• Contract deployed to testnet

[drips-wave]

This issue has been added to the Stellar Wave Program and is worth 100 Points.

🧑‍💻 Interested in contributing? Apply to work on this issue on Drips Wave, earn points, and receive rewards.

Warning

Only applications submitted via the apply link above will be considered. Please do not apply by commenting on the issue or opening a PR directly.

🤠 Repo maintainers: You can manage this issue's Points and Complexity on your Maintainer Dashboard here. Please keep an eye on applications and respond quickly 💙

ℹ️ Learn more about Drips Wave

[Obiajulu-gif]

@Obiajulu-gif has applied to work on this issue as part of the Stellar Wave Program's 1st wave.

would like to implement the Soroban Whitelist contract by:
Designing a tiered whitelist storage model (address → tier, expiry, addedAt) plus a global Merkle root option for gas-efficient verification.
Implementing core admin-only methods:
add_to_whitelist(address, tier, expires_at?)
remove_from_whitelist(address)
batch add/remove operations for multiple addresses in one call
set_admin(new_admin) / admin role management with proper authorization checks
Building tier-based access checks:
has_access(address, required_tier) and get_tier(address)
Enforcing expiration (expired entries auto-fail verification)
Adding Merkle support:
set_merkle_root(root, valid_until?)
verify_merkle(address, tier, expires_at, proof) for lightweight checks

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Obiajulu-gif to this issue.

[soomtochukwu]

@soomtochukwu has applied to work on this issue as part of the Stellar Wave Program's 1st wave.

gm @Mkalbani, I'd resolve #58 by implementing a Soroban whitelist contract with tiered permissions, address add/remove/batch ops, Merkle tree verification for efficiency, expiration dates, secure admin role management, snapshot support, full access control checks, thorough unit tests, and testnet deployment.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @soomtochukwu to this issue.

[bakarezainab]

@bakarezainab has applied to work on this issue as part of the Stellar Wave Program's 1st wave.

Hi, I would like to work on the this issue. I’ve contributed to the Stellar ecosystem and I’m a security researcher with experience building and reviewing smart contracts. I can implement a secure, tiered whitelist and access control contract for exclusive puzzles, events, and features, following best practices and keeping the design simple, auditable, and efficient

ℹ️ Repo Maintainers: To accept this application, review their application or assign @bakarezainab to this issue.

[rainwaters11]

@rainwaters11 has applied to work on this issue as part of the Stellar Wave Program's 1st wave.

Hi! I'd like to claim this #58 Whitelist and Access Control contract.

I've built Soroban contracts before and can deliver:

• Tiered whitelist with add/remove/batch operations
• Merkle tree for gas-efficient verification
• Expiration dates and admin controls
• Full test suite + testnet deployment

Ready to start immediately. Please assign me!

ℹ️ Repo Maintainers: To accept this application, review their application or assign @rainwaters11 to this issue.

[Samuel1505]

@Samuel1505 has applied to work on this issue as part of the Stellar Wave Program's 1st wave.

I would like to work on this issue, I'm a Software developer with experience in Rust and soroban. Kindly assign me

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Samuel1505 to this issue.

[beebozy]

@beebozy has applied to work on this issue as part of the Stellar Wave Program's 1st wave.

Hi, I am a smart contract developer I have worked a lot around merkle tree from airdrop claiming to proofing that sth is a member of a group. Could you assign me this

ℹ️ Repo Maintainers: To accept this application, review their application or assign @beebozy to this issue.

[Themancalledpg]

@Themancalledpg has applied to work on this issue as part of the Stellar Wave Program's 1st wave.

Hi, my name is Preciousgift, and I am a fullstack and smart contract developer skilled in React, Next.js, JavaScript, TypeScript, Tailwind CSS, and Soroban. For this task, I will:
Design and implement the whitelist data structures in contracts/whitelist, supporting tiered permissions, expirations, and snapshot functionality.
Build core whitelist logic including address add/remove, batch operations, admin role management, and tier-based access enforcement.
Integrate a Merkle tree verification system to optimize gas usage and enable efficient whitelist proofs.
Write comprehensive Soroban tests covering access control, tier enforcement, expirations, admin security, and deploy the contract to testnet.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Themancalledpg to this issue.

[ryzen-xp]

@ryzen-xp has applied to work on this issue as part of the Stellar Wave Program's 1st wave.

Hi maintainers 👋
I’m a blockchain developer with strong expertise in Stellar, Rust,TS and Stellar SDK integrations. I’ve worked on multiple Stellar-based smart contract and backend systems.

I understand the scope of this issue and can deliver a reliable, production-quality solution with proper tests and documentation.
Plz assign me !!

ETA: 2 hours

ℹ️ Repo Maintainers: To accept this application, review their application or assign @ryzen-xp to this issue.

[codewithzubair07]

@codewithzubair07 has applied to work on this issue as part of the Stellar Wave Program's 1st wave.

Hi Maintainers 👋,

I’d like to take on Issue #58: Whitelist and Access Control Contract.

I have experience working with Soroban smart contracts, access control patterns, and on-chain data structures. I’m comfortable designing contracts that balance security, gas efficiency, and clarity, especially for permissioned systems.

🧠 Implementation approach

1️⃣ Whitelist & tier design

Design a whitelist structure mapping Address → Tier

Support multiple tiers (e.g. Basic, Premium, Admin-access)

Add optional expiration timestamps per entry

2️⃣ Access control

Implement secure admin role management

Restrict whitelist mutations (add/remove/batch ops) to Admin

Expose a clean is_whitelisted(address, tier) verification function

3️⃣ Gas optimization

Implement Merkle tree–based verification for large whitelists

Support:

Direct whitelist checks (small sets)

Merkle proof verification (large sets)

4️⃣ Extra features

Batch whitelist add/remove

Whitelist snapshot support for historical verification

Safe handling of expired entries

5️⃣ Testing

Unit tests for:

Add/remove logic

Tier enforcement

Expiration handling

Merkle proof validation

Admin-only access enforcement

✅ Acceptance Criteria coverage

Addresses added/removed correctly

Tier-based permissions enforced

Merkle proofs verified efficiently

Expiration logic handled safely

Admin controls secured

Contract deployable to testnet

⏱ ETA

~5 hours

ℹ️ Repo Maintainers: To accept this application, review their application or assign @codewithzubair07 to this issue.

[Xoulomon]

@Xoulomon has applied to work on this issue as part of the Stellar Wave Program's 1st wave.

Hey @Mkalbani,

I have gone through the issue, i will love if you can assigned it to me.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Xoulomon to this issue.

[Emmy123222]

@Emmy123222 has applied to work on this issue as part of the Stellar Wave Program's 1st wave.

can i work on this please

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Emmy123222 to this issue.

[Emmy123222]

@Emmy123222 has applied to work on this issue as part of the Stellar Wave Program's 1st wave.

can i work on this please

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Emmy123222 to this issue.