5afe/CandideWalletContracts

FV: Guardians can only initiate recovery for the assigned ones

remedcu opened this issue · 0 comments

Intention

Guardians should only be able to initiate a recovery of the Safe Wallet they are assigned as guardians.

Description

The recovery module has guardians for each Safe Smart Account, set by themselves. Every guardian has the right to initiate the recovery for the Safe Smart Account they are assigned to. A guardian of one wallet should not be able to initiate recovery of another wallet which it is not a guardian of.

Note: There could be a scenario that the same address could be a guardian of multiple wallets, we are not considering that possibility for this scenario.

Expected Outcome

Rules to verify that a guardian of Safe Smart Account A cannot initiate the recovery for Safe Smart Account B (assuming that address is not a guardian for Safe Smart Account B).