minting role

[mammadrsh]

Hello
Why do we need a MINTER_ROLE in lazy minting? it is not possible to give access to all users to lazy mint? like Opensea and Rarible?

[fhouser]

I have a similar concern.
But beyond this. What's keeping a clever user from signing the desired data themselves after having gained MINTER_ROLE by using the application for example, then redeeming the token from a different wallet address?

It seems to me, that there would need to be a way to check the legitimacy of the claim to the voucher.

• User A signs data and displays NFT on marketplace
• User B sees the NFT but thinks it's too expensive and forges a voucher with their own signature.
• User B mints the NFT and gets away with a good deal.