Access Rules & Auth Zones

Overview

Access Rules are Radix's system-level authorization mechanism. Unlike EVM where access control is enforced by smart contract code (vulnerable to bugs), Radix enforces permissions at the engine level – making authorization errors structurally impossible.

Auth Zones

During transaction execution, the Auth Zone accumulates proofs (badges, ownership evidence) that methods can check against. A method guarded by an access rule will only execute if the auth zone contains the required proof.

Key Patterns

• Badge-gated access – Hold a specific NFT badge to call admin methods
• Multi-sig – Require N-of-M badge holders to authorize
• Role-based – Different roles (owner, admin, user) with different permissions
• Composable – Access rules can be combined with AND/OR logic