feat(x/asset): Add clawback and transfer auth priviledges

app/app.go

@@ -415,6 +415,8 @@ func New(
 		app.AccountKeeper,
 	)
 
+	app.BankKeeper.AppendSendRestriction(app.AssetKeeper.AssetSendRestriction)
+
 	// IBC Keeper
 	app.IBCKeeper = ibckeeper.NewKeeper(
 		appCodec, keys[ibchost.StoreKey], app.GetSubspace(ibchost.ModuleName), app.StakingKeeper, app.UpgradeKeeper, scopedIBCKeeper,

proto/realionetwork/asset/priviledges/clawback/messages.proto

@@ -0,0 +1,11 @@
+syntax = "proto3";
+package realionetwork.asset.v1;
+
+option go_package = "github.com/realiotech/realio-network/x/asset/priviledges/clawback";
+
+import "cosmos_proto/cosmos.proto";
+
+message MsgClawbackToken {
+    string account = 1 [ (cosmos_proto.scalar) = "cosmos.AddressString" ];
+    uint64 amount = 2;
+}

proto/realionetwork/asset/priviledges/freeze/messages.proto

@@ -0,0 +1,11 @@
+syntax = "proto3";
+package realionetwork.asset.v1;
+
+option go_package = "github.com/realiotech/realio-network/x/asset/priviledges/freeze";
+
+import "cosmos_proto/cosmos.proto";
+
+message MsgFreezeToken {
+    string account = 1 [ (cosmos_proto.scalar) = "cosmos.AddressString" ];
+    uint64 amount = 2;
+}

proto/realionetwork/asset/priviledges/mint/messages.proto

@@ -10,8 +10,6 @@ import "realionetwork/asset/v1/token.proto";
 
 
 message MsgMintToken {
-    string account = 1 [ (cosmos_proto.scalar) = "cosmos.AddressString" ];
-    string token_id = 2;
-    string to_account = 3;
-    uint64 amount = 4;
+    string to_account = 1;
+    uint64 amount = 2;
 }

proto/realionetwork/asset/priviledges/transfer_auth/messages.proto

@@ -0,0 +1,11 @@
+syntax = "proto3";
+package realionetwork.asset.v1;
+
+option go_package = "github.com/realiotech/realio-network/x/asset/priviledges/transfer_auth";
+
+import "cosmos_proto/cosmos.proto";
+
+message MsgUpdateAllowList {
+  repeated string allowed_addresses = 1 [ (cosmos_proto.scalar) = "cosmos.AddressString" ];
+  repeated string disallowed_addresses = 2 [ (cosmos_proto.scalar) = "cosmos.AddressString"];
+}

proto/realionetwork/asset/priviledges/transfer_auth/priv.proto

@@ -0,0 +1,8 @@
+syntax = "proto3";
+package realionetwork.asset.v1;
+
+option go_package = "github.com/realiotech/realio-network/x/asset/priviledges/transfer_auth";
+
+message AllowAddrs {
+    map<string, bool> addrs = 1;
+}

proto/realionetwork/asset/priviledges/transfer_auth/query.proto

@@ -0,0 +1,25 @@
+syntax = "proto3";
+package realionetwork.asset.v1;
+
+option go_package = "github.com/realiotech/realio-network/x/asset/priviledges/transfer_auth";
+
+import "cosmos_proto/cosmos.proto";
+import "realionetwork/asset/priviledges/transfer_auth/priv.proto"; 
+
+message QueryAllowAddressRequest {
+    string token_id = 1;
+}
+
+message QueryAllowAddressRespones {
+    AllowAddrs allow_addrs = 1;
+}
+
+message QueryIsAllowedRequest {
+    string address = 1 [ (cosmos_proto.scalar) = "cosmos.AddressString" ];
+    string token_id = 2;
+
+}
+
+message QueryIsAllowedRespones {
+    bool is_allow = 1;
+}

x/asset/keeper/keeper.go

@@ -18,13 +18,14 @@ type (
 	Keeper struct {
 		cdc codec.BinaryCodec
 		// registry is used to register privilege interface and implementation.
-		registry         cdctypes.InterfaceRegistry
-		storeKey         storetypes.StoreKey
-		memKey           storetypes.StoreKey
-		paramstore       paramtypes.Subspace
-		bankKeeper       types.BankKeeper
-		ak               types.AccountKeeper
-		PrivilegeManager map[string]types.PrivilegeI
+		registry           cdctypes.InterfaceRegistry
+		storeKey           storetypes.StoreKey
+		memKey             storetypes.StoreKey
+		paramstore         paramtypes.Subspace
+		bankKeeper         types.BankKeeper
+		ak                 types.AccountKeeper
+		PrivilegeManager   map[string]types.PrivilegeI
+		RestrictionChecker []RestrictionChecker
 	}
 )
 
@@ -68,6 +69,12 @@ func (k *Keeper) AddPrivilege(priv types.PrivilegeI) error {
 	// regiester the privilege's interfaces
 	priv.RegisterInterfaces(k.registry)
 
+	checker, ok := priv.(RestrictionChecker)
+	// currently we should only support one restriction checker at a time
+	if ok && len(k.RestrictionChecker) == 0 {
+		k.RestrictionChecker = append(k.RestrictionChecker, checker)
+	}
+
 	return nil
 }
 

x/asset/keeper/keeper_test.go

@@ -106,8 +106,8 @@
 }
 
 func (m MockPrivilegeI) MsgHandler() types.MsgHandler {
-	return func(context context.Context, privMsg sdk.Msg, tokenID string, privAcc sdk.AccAddress) (proto.Message, error) {
-		typeUrl := sdk.MsgTypeURL(privMsg)
+	return func(context context.Context, privMsg proto.Message, tokenID string, privAcc sdk.AccAddress) (proto.Message, error) {
+		typeUrl := "/" + proto.MessageName(privMsg)
 		if typeUrl != sdk.MsgTypeURL(&types.MsgMock{}) {
 			return nil, errors.New("unsupport msg type")
 		}
@@ -124,7 +124,7 @@
 }
 
 func (m MockPrivilegeI) QueryHandler() types.QueryHandler {
-	return func(context context.Context, privQuery sdk.Msg) (proto.Message, error) {
+	return func(context context.Context, privQuery proto.Message, tokenID string) (proto.Message, error) {
 		return nil, nil
 	}
 }

x/asset/keeper/restriction.go

@@ -0,0 +1,54 @@
+package keeper
+
+import (
+	errorsmod "cosmossdk.io/errors"
+	"github.com/realiotech/realio-network/x/asset/types"
+
+	sdk "github.com/cosmos/cosmos-sdk/types"
+)
+
+type RestrictionChecker interface {
+	IsAllow(ctx sdk.Context, tokenId string, sender string) (bool, error)
+}
+
+func (k Keeper) AssetSendRestriction(ctx sdk.Context, fromAddr, toAddr sdk.AccAddress, amt sdk.Coins) (newToAddr sdk.AccAddress, err error) {
+	newToAddr = toAddr
+	err = nil
+
+	// if no checker exist allow all sender
+	if len(k.RestrictionChecker) == 0 {
+		return newToAddr, nil
+	}
+
+	checker := k.RestrictionChecker[0]
+
+	for _, coin := range amt {
+		// Check if the value already exists
+		// fetch bank metadata to get symbol from denom
+		symbol := coin.Denom
+		tokenMetadata, found := k.bankKeeper.GetDenomMetaData(ctx, coin.Denom)
+		if found {
+			symbol = tokenMetadata.Symbol
+		}
+		_, isFound := k.GetToken(
+			ctx,
+			symbol,
+		)
+		if !isFound {
+			continue
+		}
+
+		isAllow, err := checker.IsAllow(ctx, symbol, fromAddr.String())
+		if err != nil {
+			return newToAddr, err
+		}
+
+		if isAllow {
+			continue
+		} else { //nolint:revive // superfluous else, could fix, but not worth it?
+			err = errorsmod.Wrapf(types.ErrNotAuthorized, "%s is not authorized to transact with %s", fromAddr, coin.Denom)
+			return newToAddr, err
+		}
+	}
+	return newToAddr, nil
+}