feat(x/authz): Add MsgRevokeAll (cosmos#20161)

Co-authored-by: Tuan Tran <[email protected]> Co-authored-by: Khanh Hoa <[email protected]>
notional-labs · Apr 26, 2024 · 2d0d190 · 2d0d190
1 parent fbb94f4
commit 2d0d190
Show file tree

Hide file tree

Showing 16 changed files with 2,408 additions and 135 deletions.
diff --git a/api/cosmos/authz/v1beta1/event.pulsar.go b/api/cosmos/authz/v1beta1/event.pulsar.go
diff --git a/api/cosmos/authz/v1beta1/tx.pulsar.go b/api/cosmos/authz/v1beta1/tx.pulsar.go
diff --git a/api/cosmos/authz/v1beta1/tx_grpc.pb.go b/api/cosmos/authz/v1beta1/tx_grpc.pb.go
diff --git a/x/authz/CHANGELOG.md b/x/authz/CHANGELOG.md
@@ -28,6 +28,7 @@ Ref: https://keepachangelog.com/en/1.0.0/
 ### Features
 
 * [#18737](https://github.com/cosmos/cosmos-sdk/pull/18737) Added a limit of 200 grants pruned per `BeginBlock` and the `PruneExpiredGrants` message that prunes 75 expired grants on every run.
+* [#20161](https://github.com/cosmos/cosmos-sdk/pull/20161) Added `RevokeAll` method to revoke all grants at once.
 
 ### API Breaking Changes
 

diff --git a/x/authz/README.md b/x/authz/README.md
@@ -21,6 +21,7 @@ granting arbitrary privileges from one account (the granter) to another account
 * [Messages](#messages)
     * [MsgGrant](#msggrant)
     * [MsgRevoke](#msgrevoke)
+    * [MsgRevokeAll](#msgrevokeall)
     * [MsgExec](#msgexec)
     * [MsgPruneExpiredGrants](#msgpruneexpiredgrants)
 * [Events](#events)
@@ -168,6 +169,19 @@ The message handling should fail if:
 
 NOTE: The `MsgExec` message removes a grant if the grant has expired.
 
+### MsgRevokeAll
+
+The `MsgRevokeAll` message revokes all grants issued by the specified granter. This is useful for quickly removing all authorizations granted by a single granter without specifying individual message types or grantees.
+
+```protobuf reference
+https://github.com/cosmos/cosmos-sdk/tree/main/proto/cosmos/authz/v1beta1/tx.proto#L91-L97
+```
+
+The message handling should fail if:
+
+* the `granter` address is not provided or invalid.
+* the `granter` does not have any active grants.
+
 ### MsgExec
 
 When a grantee wants to execute a transaction on behalf of a granter, they must send `MsgExec`.