[object] Add permissioned checks to object

[runtian-zhou]

Description

Adds permissioned signer support for object transfers and token/collection mutations in the Aptos Framework. This change introduces new permission types and validation checks to ensure only authorized signers can perform transfers and mutations on objects, tokens and collections.

Type of Change

• New feature
• Aptos Framework

Which Components or Systems Does This Change Impact?

• Move/Aptos Virtual Machine
• Aptos Framework

How Has This Been Tested?

Added new test cases in object.move and aptos_token.move to verify permissioned signer functionality for transfers and mutations.

Key Areas to Review

• New permission types added: TransferPermission, TokenUpdatePermission, CollectionUpdatePermission
• Permission validation checks in transfer and mutation operations
• Integration with existing permissioned_signer module
• Authorization and revocation flows for token/collection mutations

Checklist

• I have read and followed the CONTRIBUTING doc
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I identified and added all stakeholders and component owners affected by this change as reviewers
• I tested both happy and unhappy path of the functionality
• I have made corresponding changes to the documentation

[trunk-io]

⏱️ 1h 45m total CI duration on this PR

Slowest 15 Jobs	Cumulative Duration	Recent Runs
rust-move-unit-coverage	18m	🟩
rust-move-unit-coverage	14m	🟩
rust-move-unit-coverage	14m	🟩
rust-move-tests	10m	🟥
rust-move-tests	9m	🟥
general-lints	7m	🟩 🟩 🟩 🟩
rust-cargo-deny	7m	🟩 🟩 🟩 🟩
rust-move-tests	5m	⬜
rust-move-unit-coverage	5m	⬜
execution-performance / test-target-determinator	5m	🟩
check-dynamic-deps	4m	🟩 🟩 🟩 🟩 🟩 (+1 more)
rust-move-tests	3m	🟥
semgrep/ci	2m	🟩 🟩 🟩 🟩 🟩 (+1 more)
file_change_determinator	48s	🟩 🟩 🟩 🟩
file_change_determinator	43s	🟩 🟩 🟩 🟩

_{settings ⋅ feedback ⋅ docs ⋅ learn more about trunk.io}

[runtian-zhou]

• Add another flavor of permission api #15609
• Create object with permissioned signer #15707
• [object] Add permissioned checks to object #14582 👈 (View in Graphite)
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 59.4%. Comparing base (0161bbf) to head (2431b7b).

Additional details and impacted files

@@                          Coverage Diff                           @@
##           09-04-add_permission_check_to_account   #14582   +/-   ##
======================================================================
  Coverage                                   59.4%    59.4%           
======================================================================
  Files                                        857      857           
  Lines                                     210762   210762           
======================================================================
  Hits                                      125197   125197           
  Misses                                     85565    85565           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[github-actions]

✅ Forge suite compat success on f69dc31b0f674662b6bfa941dc7eee9ce9035e29 ==> 764b8d439d5e433f104d8f8a1e96677b17978000

Compatibility test results for f69dc31b0f674662b6bfa941dc7eee9ce9035e29 ==> 764b8d439d5e433f104d8f8a1e96677b17978000 (PR)
1. Check liveness of validators at old version: f69dc31b0f674662b6bfa941dc7eee9ce9035e29
compatibility::simple-validator-upgrade::liveness-check : committed: 15541.45 txn/s, latency: 2020.79 ms, (p50: 2000 ms, p70: 2100, p90: 2800 ms, p99: 3800 ms), latency samples: 505400
2. Upgrading first Validator to new version: 764b8d439d5e433f104d8f8a1e96677b17978000
compatibility::simple-validator-upgrade::single-validator-upgrading : committed: 4939.96 txn/s, latency: 6239.12 ms, (p50: 7000 ms, p70: 7500, p90: 7800 ms, p99: 7800 ms), latency samples: 98060
compatibility::simple-validator-upgrade::single-validator-upgrade : committed: 4803.85 txn/s, latency: 7082.98 ms, (p50: 7800 ms, p70: 7800, p90: 7800 ms, p99: 8000 ms), latency samples: 174240
3. Upgrading rest of first batch to new version: 764b8d439d5e433f104d8f8a1e96677b17978000
compatibility::simple-validator-upgrade::half-validator-upgrading : committed: 5210.14 txn/s, latency: 5940.44 ms, (p50: 6700 ms, p70: 7200, p90: 7300 ms, p99: 7400 ms), latency samples: 101660
compatibility::simple-validator-upgrade::half-validator-upgrade : committed: 5102.72 txn/s, latency: 6749.15 ms, (p50: 7400 ms, p70: 7500, p90: 7500 ms, p99: 7700 ms), latency samples: 177600
4. upgrading second batch to new version: 764b8d439d5e433f104d8f8a1e96677b17978000
compatibility::simple-validator-upgrade::rest-validator-upgrading : committed: 9357.95 txn/s, latency: 3275.23 ms, (p50: 3900 ms, p70: 4000, p90: 4100 ms, p99: 4300 ms), latency samples: 165280
compatibility::simple-validator-upgrade::rest-validator-upgrade : committed: 9309.28 txn/s, latency: 3680.68 ms, (p50: 4000 ms, p70: 4100, p90: 4200 ms, p99: 4400 ms), latency samples: 305580
5. check swarm health
Compatibility test for f69dc31b0f674662b6bfa941dc7eee9ce9035e29 ==> 764b8d439d5e433f104d8f8a1e96677b17978000 passed
Test Ok

• Grafana dashboard
• Humio Logs
• Axiom Logs
• Validator CPU Profile
• Fullnode CPU Profile
• Test runner output
• Test run is land-blocking

[github-actions]

✅ Forge suite realistic_env_max_load success on 764b8d439d5e433f104d8f8a1e96677b17978000

two traffics test: inner traffic : committed: 14962.43 txn/s, submitted: 14962.58 txn/s, expired: 0.16 txn/s, latency: 2654.76 ms, (p50: 2700 ms, p70: 2700, p90: 2700 ms, p99: 3600 ms), latency samples: 5689020
two traffics test : committed: 99.97 txn/s, latency: 1282.61 ms, (p50: 1300 ms, p70: 1300, p90: 1500 ms, p99: 3100 ms), latency samples: 1840
Latency breakdown for phase 0: ["MempoolToBlockCreation: max: 1.640, avg: 1.487", "ConsensusProposalToOrdered: max: 0.297, avg: 0.289", "ConsensusOrderedToCommit: max: 0.303, avg: 0.295", "ConsensusProposalToCommit: max: 0.598, avg: 0.585"]
Max non-epoch-change gap was: 1 rounds at version 6239624 (avg 0.00) [limit 4], 1.88s no progress at version 6239624 (avg 0.19s) [limit 15].
Max epoch-change gap was: 0 rounds at version 0 (avg 0.00) [limit 4], 0.57s no progress at version 2985208 (avg 0.57s) [limit 16].
Test Ok

• Grafana dashboard
• Humio Logs
• Axiom Logs
• Validator CPU Profile
• Fullnode CPU Profile
• Test runner output
• Test run is land-blocking