Closed mkurapov closed 4 weeks ago
@njlie
Based on the Slack message, we wanted to soft delete access
. Since it doesn't have any status information/expiry or anything on the access
model, I think we just don't do anything to it other than removing the delete call when a grant is revoked.
Context
Original slack thread
Currently in testnet, there is a grants page that shows all of the grants for the user. However, once a user revokes a particular grant (outgoing payment grant), because the grant access is hard deleted from the DB, there is no way to get the grant to match user's wallet addresses anymore. This means in rafiki.money/testnet this grant becomes not visible.
We should not hard delete access when a grant is revoked. We also hard delete access tokens when a grant is revoked, but for an audit trail, we should soft delete those instead.
Todo
access
when a grant is revokedaccessTokens
when a grant is revoked