Problem: anyone can call request batch txs

[thomas-nguy]

Solution limit this endpoints to only orchestrators and validators

[tomtau]

likely ok, but not sure how the delegate keys are managed internally.
if it's expected to be increasing, many this could be indexed, so one can just do one lookup k.isAuthorized(msg.Signer) ?

[tomtau]

will there be many delegate keys / keep increasing?

[adu-crypto]

I'm wondering if we should clean up the delegatekeys for every block at BeginBlocker so that we could correctly update the valset in gravity module. I didn't see any method for gravity module to delete delegatekeys.

gravity-bridge/module/x/gravity/abci.go

Lines 19 to 25 in f1b1ef0

	func BeginBlocker(ctx sdk.Context, k keeper.Keeper) {
	cleanupTimedOutBatchTxs(ctx, k)
	cleanupTimedOutContractCallTxs(ctx, k)
	createSignerSetTxs(ctx, k)
	createBatchTxs(ctx, k)
	pruneSignerSetTxs(ctx, k)
	}

[thomas-nguy]

yeah but it should be fine in our case, for the time being, as we are not planning to have many update in our validator set.
It goes along with the ability to update the delegateKeys once set which is a pending issue
#111