fix(protocol): fix permission in ComposeVerifier

[dantaik]

The verifyProof function of the ComposeVerifier contract uses the onlyAuthorizedCaller modifier, which allows descendant contracts to introduce additional authorized callers. However, the verifyBatchProof function must be called by the TaikoL1 contract. This means that the verifyBatchProof function of the ZkAndTeeVerifier is not authorized to invoke the sub-verifiers and is therefore non-functional.

Consider using the onlyAuthorizedCaller modifier in both of the aforementioned cases.

[openzeppelin-code]

fix(protocol): fix permission in ComposeVerifier

Generated at commit: c96541403c465901301ca68e3c6a0e6b2b4b9d85

🚨 Report Summary

	Severity Level	Results
Contracts	Critical High Medium Low Note Total	3 3 0 7 43 56
Dependencies	Critical High Medium Low Note Total	0 0 0 0 0 0

---

For more details view the full report in OpenZeppelin Code Inspector