Authz

ℹ️info

Terra's Authz module inherits from the Cosmos SDK's authz module. This document is a stub and mainly explains important Terra-specific notes on how it is used.

The authz (message authorization) module allows users to authorize another account to send messages on their behalf. Certain authorizations, such as the spending of another account's tokens, can be parameterized to constrain the permissions of the grantee, such as setting a spending limit.

Message types

MsgGrant

// MsgGrant is a request type for Grant method. It declares authorization to the grantee

// on behalf of the granter with the provided expiration time.

type MsgGrant struct {

Granter string `protobuf:"bytes,1,opt,name=granter,proto3" json:"granter,omitempty"`

Grantee string `protobuf:"bytes,2,opt,name=grantee,proto3" json:"grantee,omitempty"`

Grant Grant `protobuf:"bytes,3,opt,name=grant,proto3" json:"grant"`

}

MsgRevoke

// MsgRevoke revokes any authorization with the provided sdk.Msg type on the

// granter's account with that has been granted to the grantee.

type MsgRevoke struct {

Granter string `protobuf:"bytes,1,opt,name=granter,proto3" json:"granter,omitempty"`

Grantee string `protobuf:"bytes,2,opt,name=grantee,proto3" json:"grantee,omitempty"`

MsgTypeUrl string `protobuf:"bytes,3,opt,name=msg_type_url,json=msgTypeUrl,proto3" json:"msg_type_url,omitempty"`

}

}

MsgExec

// MsgExec attempts to execute the provided messages using

// authorizations granted to the grantee. Each message should have only

// one signer corresponding to the granter of the authorization.

type MsgExec struct {

Grantee string `protobuf:"bytes,1,opt,name=grantee,proto3" json:"grantee,omitempty"`

// Authorization Msg requests to execute. Each msg must implement Authorization interface

// The x/authz will try to find a grant matching (msg.signers[0], grantee, MsgTypeURL(msg))

// triple and validate it.

Msgs []*types.Any `protobuf:"bytes,2,rep,name=msgs,proto3" json:"msgs,omitempty"`

}