-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
DRAFT: sdk v0.50 upgrade #3
base: master
Are you sure you want to change the base?
Conversation
Co-authored-by: niil <[email protected]>
…nt the LegacyMsg interface
04644c2
to
06abbeb
Compare
Hi all, I am a member of Firmachain. I just mention about a small peace.
Check this one, plz |
First, I appreciate all these contributions @dimiandre. I have a few questions to make sure I understand these updates.
|
app/upgrades/v05/upgrades.go
Outdated
newIcaHostParams := icahosttypes.Params{ | ||
HostEnabled: true, | ||
// https://github.com/cosmos/ibc-go/blob/v4.2.0/docs/apps/interchain-accounts/parameters.md#allowmessages | ||
AllowMessages: []string{"*"}, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We don't need to set the Allow Messages directly not "*"
like below example
AllowMessages: []string{"*"}, | |
AllowMessages: ["/cosmos.gov.v1.Vote"], |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If you want just the cosmos.gov.v1.Vote message to be allowed, we can change it to this. Can I proceed to set AllowMessages to ["/cosmos.gov.v1.Vote"]?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I wonder about the vulnerability when we set this as a *
. If it doesn't, *
is okay.
And, I don't exactly know what governance features require us to use messages when operating interchain. I think we could leave it as a *
for now.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@koofree There should be no vulnerability in using *
(at least in theory), since this is the configuration used by gaia
and juno
for example.
If you want to be more conservative, we could use the approach that is used by osmosis
, which allows the following cosmos/ibc/wasm messages at the moment:
- /ibc.applications.transfer.v1.MsgTransfer
- /cosmos.bank.v1beta1.MsgSend
- /cosmos.staking.v1beta1.MsgDelegate
- /cosmos.staking.v1beta1.MsgBeginRedelegate
- /cosmos.staking.v1beta1.MsgCreateValidator
- /cosmos.staking.v1beta1.MsgEditValidator
- /cosmos.staking.v1beta1.MsgUndelegate
- /cosmos.distribution.v1beta1.MsgWithdrawDelegatorReward
- /cosmos.distribution.v1beta1.MsgSetWithdrawAddress
- /cosmos.distribution.v1beta1.MsgWithdrawValidatorCommission
- /cosmos.distribution.v1beta1.MsgFundCommunityPool
- /cosmos.gov.v1beta1.MsgVote
- /cosmwasm.wasm.v1.MsgExecuteContract
- /cosmwasm.wasm.v1.MsgInstantiateContract
- /cosmos.authz.v1beta1.MsgGrant
- /cosmos.authz.v1beta1.MsgRevoke
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hi @niilptr! I clearly understood. If we can choose the conservative way, I have no doubt doing that way. Can we go on your suggestion?
Hi @koofree, thanks for the feedbacks! I will answer to your previous questions here:
|
@niilptr I appreciate all the answers about this PR. Through it, I highly understand this upgrade. At the answer 3, I don't think it needs to be back to this upgrade. |
No description provided.