FV: Guardians can only initiate recovery for the assigned ones
remedcu opened this issue · 0 comments
Intention
Guardians should only be able to initiate a recovery of the Safe Wallet they are assigned as guardians.
Description
The recovery module has guardians for each Safe Smart Account, set by themselves. Every guardian has the right to initiate the recovery for the Safe Smart Account they are assigned to. A guardian of one wallet should not be able to initiate recovery of another wallet which it is not a guardian of.
Note: There could be a scenario that the same address could be a guardian of multiple wallets, we are not considering that possibility for this scenario.
Expected Outcome
Rules to verify that a guardian of Safe Smart Account A cannot initiate the recovery for Safe Smart Account B (assuming that address is not a guardian for Safe Smart Account B).