`gov` module should validate signer authority

informalsystems / basecoin-rs

An example ABCI application making use of tendermint-rs and ibc-rs

Apache License 2.0

56 stars 17 forks source link

`gov` module should validate signer authority #179

Open seanchen1991 opened 6 months ago

seanchen1991 commented 6 months ago

Problem

The gov module currently does not validate the authority of signers when delivering a governance proposal message. Specifically, when sending an upgrade proposal or a client recovery proposal, the signer's authority is not checked.

Proposal

The authority of governance proposal message signers should be validated by basecoin before delivering such messages.