Add Aegis role permission tests

[El-swaggerito]

Description

Difficulty: Expert

Type: Test

Summary

Add role permission tests across admin, issuer, compliance, and investor operations.

Current Behaviour

Privileged operations may not be fully tested for wrong caller or wrong role failures.

Expected Behaviour

The test suite should verify that each protected function rejects unauthorised callers and preserves state.

Suggested Implementation

Create role matrix tests, wrong-caller tests, state consistency assertions, and docs.

Files or Areas Likely Affected

• src/
• tests/
• docs/

Acceptance Criteria

• Role permission test matrix is added.
• Admin-only operations are tested.
• Issuer-only operations are tested where applicable.
• Compliance operations are tested.
• Wrong-role calls preserve state.
• Docs explain role assumptions.

Additional Notes

This is security-critical.

[NovusCyber]

Hello. I would like to apply to work on this issue.

Proposed Implementation Steps:

• Role and Function Mapping: Analyze the src/ directory to identify all functions requiring privileges (Admin, Issuer, Compliance, Investor). Note: I will need to review the exact source code of the contracts/modules to map this without making assumptions.

• Test Matrix: Implement a matrix in tests/ where each role attempts to execute operations of the other roles (wrong-caller tests) to ensure rejection.

• State Assertions: Add specific assertions in each failure test to guarantee that variables and overall state do not mutate after an unauthorized attempt.

• Documentation: Update docs/ to clearly define business rules, role permissions, and applied security assumptions.

Commitment:

Given that this is a security-critical issue, I commit to delivering comprehensive test coverage that meets all acceptance criteria within the agreed timeframe, maintaining the highest quality standards.

[grantfox-oss]

🦊 GrantFox — @NovusCyber has been assigned to this issue as part of the Official Campaign | FWC26 campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #164)
2. Your PR will be reviewed by the Axionvera maintainers

Good luck! Track your progress on GrantFox.

[grantfox-oss]

🎉 This issue has been marked as completed on GrantFox!

@NovusCyber's PR #184 was approved and merged by @El-swaggerito.

🏆 @NovusCyber: You earned 35 FoxPoints for this contribution! Your current tier: Explorer (223 total points). Track your full progress on GrantFox.

👏 Great work, @NovusCyber! Keep contributing to Axionvera.