RESUME_ROLE check for GateSeal, TWG roles test (#521)

* Fix permissions tests

* Add RESUME_ROLE check on gate_seal for WQ

* Fix number of holders check for RESUME_ROLE

Author: hweawer

tests/acceptance/test_gate_seal_acceptance.py

@@ -34,6 +34,7 @@ def test_gate_seal(contract: Contract, gate_seal_committee: Account, reseal_mana
     assert contracts.withdrawal_queue.address in sealables
 
     _check_role(contracts.withdrawal_queue, "PAUSE_ROLE", reseal_manager.address)
+    _check_role(contracts.withdrawal_queue, "RESUME_ROLE", reseal_manager.address, 1)
 
     assert contract.get_seal_duration_seconds() == GATE_SEAL_PAUSE_DURATION
     assert contract.get_expiry_timestamp() == GATE_SEAL_EXPIRY_TIMESTAMP

tests/regression/test_permissions.py

@@ -54,6 +54,8 @@
     CS_FEE_ORACLE_ADDRESS,
     CS_ORACLE_HASH_CONSENSUS_ADDRESS,
     CS_PERMISSIONLESS_GATE_ADDRESS,
+    TRIGGERABLE_WITHDRAWALS_GATEWAY,
+    VEB_TWG_GATE_SEAL,
     CS_VETTED_GATE_ADDRESS,
     CS_PARAMS_REGISTRY_ADDRESS,
     CS_STRIKES_ADDRESS,
@@ -456,6 +458,18 @@ def protocol_permissions():
                 "RECOVERER_ROLE": [],
             }
         },
+        TRIGGERABLE_WITHDRAWALS_GATEWAY: {
+            "contract_name": "TriggerableWithdrawalsGateway",
+            "contract": contracts.triggerable_withdrawals_gateway,
+            "type": "CustomApp",
+            "roles": {
+                "DEFAULT_ADMIN_ROLE": [contracts.agent],
+                "ADD_FULL_WITHDRAWAL_REQUEST_ROLE": [VALIDATORS_EXIT_BUS_ORACLE, CS_EJECTOR_ADDRESS],
+                "PAUSE_ROLE": [VEB_TWG_GATE_SEAL, RESEAL_MANAGER],
+                "RESUME_ROLE": [RESEAL_MANAGER],
+                "TW_EXIT_LIMIT_MANAGER_ROLE": [],
+            }
+        },
         INSURANCE_FUND: {
             "contract_name": "InsuranceFund",
             "contract": contracts.insurance_fund,