Looking at the code I think there's an issue with root signing when signers are removed. In this case
root v1 has root signer A, threshold 1
user B creates root v2 that contains root signer B, threshold 1
signer A tries to sign
root v2 should in the end be signed by both A and B but I think currently when A runs playground-sign, it won't sign as _user_signature_needed() does not look into the known good root signers
Looking at the code I think there's an issue with root signing when signers are removed. In this case
root v2 should in the end be signed by both A and B but I think currently when A runs
playground-sign
, it won't sign as_user_signature_needed()
does not look into the known good root signersThere is a related testing issue #106