onlyTreasury modifier for issueRedeemable4YR()

contracts/EscrowIssuer.sol

@@ -12,22 +12,36 @@ contract EscrowIssuer is ERC20 {
     /// @notice rewards escrow contract
     IRewardEscrow public immutable rewardEscrow;
 
+    /// @notice treasury address
+    address public treasury;
+
+    /// @notice access control modifier for EscrowIssuer
+    modifier onlyTreasury() {
+        require(
+            msg.sender == address(treasury),
+            "Only the Treasury can perform this action"
+        );
+        _;
+    }
+
     constructor(
         string memory _name,
         string memory _symbol,
         address _kwenta,
-        address _rewardEscrowAddr
+        address _rewardEscrowAddr,
+        address _treasury
     ) ERC20(_name, _symbol) {
         kwenta = IKwenta(_kwenta);
         rewardEscrow = IRewardEscrow(_rewardEscrowAddr);
+        treasury = _treasury;
     }
 
     /**
      *   Receive Kwenta from user, then mint
      *   redeemable escrowed Kwenta and give
      *   to user.
      */
-    function issueRedeemable4YR(uint amount) public payable {
+    function issueRedeemable4YR(uint amount) public payable onlyTreasury {
         require(
             kwenta.transferFrom(msg.sender, address(this), amount),
             "Token transfer failed"

test/foundry/EscrowIssuer.t.sol

@@ -39,7 +39,8 @@ contract EscrowIssuerTest is Test {
             "EscIss",
             "EIS",
             address(kwenta),
-            address(rewardEscrow)
+            address(rewardEscrow),
+            address(this)
         );
     }
 
@@ -97,4 +98,15 @@ contract EscrowIssuerTest is Test {
         vm.prank(user);
         escrowIssuer.redeemEscrow4YR(10);
     }
+
+    /**
+        test when non-treasury tries to call issue redeemable
+        should revert
+     */
+    function testIssueRedeemableNonTreasury() public {
+        vm.startPrank(user);
+        kwenta.approve(address(escrowIssuer), 10);
+        vm.expectRevert("Only the Treasury can perform this action");
+        escrowIssuer.issueRedeemable4YR(10);
+    }
 }