permission for framework

[runtian-zhou]

Description

Implement checks for all framework related privilege operations.

Type of Change

• New feature
• Bug fix
• Breaking change
• Performance improvement
• Refactoring
• Dependency update
• Documentation update
• Tests

Which Components or Systems Does This Change Impact?

• Validator Node
• Full Node (API, Indexer, etc.)
• Move/Aptos Virtual Machine
• Aptos Framework
• Aptos CLI/SDK
• Developer Infrastructure
• Other (specify)

How Has This Been Tested?

Added relevant tests.

Key Areas to Review

Whether there's any priviledged operation need to be gated.

Checklist

• I have read and followed the CONTRIBUTING doc
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I identified and added all stakeholders and component owners affected by this change as reviewers
• I tested both happy and unhappy path of the functionality
• I have made corresponding changes to the documentation

[trunk-io]

⏱️ 3h 36m total CI duration on this PR

Slowest 15 Jobs	Cumulative Duration	Recent Runs
forge-e2e-test / forge	27m	🟥 🟩
rust-move-unit-coverage	20m	🟩
rust-move-unit-coverage	19m	🟩
rust-move-unit-coverage	18m	🟩
rust-move-unit-coverage	14m	🟩
rust-targeted-unit-tests	14m	⬜
rust-cargo-deny	12m	🟩 🟩 🟩 🟩 🟩 (+1 more)
general-lints	11m	🟩 🟩 🟩 🟩 🟩 (+1 more)
rust-move-unit-coverage	10m	🟩
rust-move-tests	10m	🟥
rust-move-tests	9m	🟥
rust-move-tests	9m	🟥
rust-move-tests	9m	🟥
rust-move-unit-coverage	9m	🟩
rust-move-tests	9m	🟥

🚨 1 job on the last run was significantly faster/slower than expected

Job	Duration	vs 7d avg	Delta
rust-cargo-deny	4m	2m

_{settings ⋅ feedback ⋅ docs ⋅ learn more about trunk.io}

[runtian-zhou]

• permission for framework #14605 👈 (View in Graphite)
• add permissions for fungible assets operation #14567 : 1 other dependent PR (#15737 )
• Add permission checks to account #15741
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 60.0%. Comparing base (2431b7b) to head (e4239a8).

Additional details and impacted files

@@                            Coverage Diff                            @@
##           09-09-add_perimission_checks_to_object   #14605     +/-   ##
=========================================================================
+ Coverage                                    59.4%    60.0%   +0.6%     
=========================================================================
  Files                                         857      857             
  Lines                                      210762   210762             
=========================================================================
+ Hits                                       125197   126586   +1389     
+ Misses                                      85565    84176   -1389     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[lightmark]

Could we add the initialization with intent code?

[github-actions]

✅ Forge suite compat success on f69dc31b0f674662b6bfa941dc7eee9ce9035e29 ==> 174451f62ba1b90f9d59bccfb729ce74133cb075

Compatibility test results for f69dc31b0f674662b6bfa941dc7eee9ce9035e29 ==> 174451f62ba1b90f9d59bccfb729ce74133cb075 (PR)
1. Check liveness of validators at old version: f69dc31b0f674662b6bfa941dc7eee9ce9035e29
compatibility::simple-validator-upgrade::liveness-check : committed: 16277.71 txn/s, latency: 1958.09 ms, (p50: 1900 ms, p70: 1900, p90: 2100 ms, p99: 2700 ms), latency samples: 524600
2. Upgrading first Validator to new version: 174451f62ba1b90f9d59bccfb729ce74133cb075
compatibility::simple-validator-upgrade::single-validator-upgrading : committed: 5036.03 txn/s, latency: 6133.14 ms, (p50: 6900 ms, p70: 7400, p90: 7600 ms, p99: 7800 ms), latency samples: 99240
compatibility::simple-validator-upgrade::single-validator-upgrade : committed: 5024.71 txn/s, latency: 6816.55 ms, (p50: 7600 ms, p70: 7600, p90: 7800 ms, p99: 7800 ms), latency samples: 176760
3. Upgrading rest of first batch to new version: 174451f62ba1b90f9d59bccfb729ce74133cb075
compatibility::simple-validator-upgrade::half-validator-upgrading : committed: 4828.16 txn/s, latency: 6386.51 ms, (p50: 7200 ms, p70: 7700, p90: 8000 ms, p99: 8200 ms), latency samples: 97020
compatibility::simple-validator-upgrade::half-validator-upgrade : committed: 4736.62 txn/s, latency: 7250.24 ms, (p50: 8000 ms, p70: 8200, p90: 8400 ms, p99: 8600 ms), latency samples: 169860
4. upgrading second batch to new version: 174451f62ba1b90f9d59bccfb729ce74133cb075
compatibility::simple-validator-upgrade::rest-validator-upgrading : committed: 9059.09 txn/s, latency: 3313.06 ms, (p50: 3900 ms, p70: 4000, p90: 4300 ms, p99: 4500 ms), latency samples: 164060
compatibility::simple-validator-upgrade::rest-validator-upgrade : committed: 8991.15 txn/s, latency: 3817.28 ms, (p50: 4000 ms, p70: 4400, p90: 4500 ms, p99: 4600 ms), latency samples: 296460
5. check swarm health
Compatibility test for f69dc31b0f674662b6bfa941dc7eee9ce9035e29 ==> 174451f62ba1b90f9d59bccfb729ce74133cb075 passed
Test Ok

• Grafana dashboard
• Humio Logs
• Axiom Logs
• Validator CPU Profile
• Fullnode CPU Profile
• Test runner output
• Test run is land-blocking

[github-actions]

✅ Forge suite realistic_env_max_load success on 174451f62ba1b90f9d59bccfb729ce74133cb075

two traffics test: inner traffic : committed: 14875.71 txn/s, submitted: 14877.34 txn/s, expired: 1.63 txn/s, latency: 2660.96 ms, (p50: 2700 ms, p70: 2700, p90: 2900 ms, p99: 3900 ms), latency samples: 5656080
two traffics test : committed: 99.98 txn/s, latency: 1294.95 ms, (p50: 1300 ms, p70: 1300, p90: 1400 ms, p99: 1600 ms), latency samples: 1820
Latency breakdown for phase 0: ["MempoolToBlockCreation: max: 1.595, avg: 1.499", "ConsensusProposalToOrdered: max: 0.292, avg: 0.289", "ConsensusOrderedToCommit: max: 0.330, avg: 0.319", "ConsensusProposalToCommit: max: 0.619, avg: 0.607"]
Max non-epoch-change gap was: 0 rounds at version 0 (avg 0.00) [limit 4], 1.04s no progress at version 31191 (avg 0.19s) [limit 15].
Max epoch-change gap was: 0 rounds at version 0 (avg 0.00) [limit 4], 0.53s no progress at version 2394711 (avg 0.53s) [limit 16].
Test Ok

• Grafana dashboard
• Humio Logs
• Axiom Logs
• Validator CPU Profile
• Fullnode CPU Profile
• Test runner output
• Test run is land-blocking