# Operational Admin Suggestions Low/Info · Three Sigma · Institutional lending · 16th November, 2023 Finding 3S-MAPLE-N03 of the Maple Withdrawal Manager security review. - Protocol: https://maple.finance/ - Report: /reports/maple-finance-ii-2023 - Source: https://cdn.sanity.io/files/qoqld077/production/34f2311ad7e8315d043e23054e794c136f19a079.pdf --- ### Description - MapleWithdrawalManager:setExitConfig() could be performed by the operational admin, since it can call [`setPendingDelegate()`](https://github.com/maple-labs/pool-v2-private/blob/c8d9cbf8edecccb53323aa91d71b719ac4230c3e/contracts/MaplePoolManager.sol#L150) and acquire the permissions anyway. - Delegates could choose whether they wanted the operational admin to have their permissions, basically delegating their role. ### Status Addressed in [#4be9021](https://github.com/maple-labs/withdrawal-manager-cyclical-private/pull/69/commits/4be9021e7ac2acfb46f4caf26fd6e9785bb376ac)