Summary

Currently in x/authz, you can't give someone permission to delegate to all validators using the delegate permission. You have to include an AllowList or a DenyList. But if you want to give permission to delegate to all validators, you have to do the generic authorization for the message type. (Or you make your DenyList be some inactive validator)

Problem Definition

Right now you have to use DenyList={inactive validator} or generic permissions to allow someone to delegate to all validators.

Proposal

Allow empty DenyLists, or make it more explicit in the spec that the authz delegate permission is explicitly for if you want to limit what validators can be delegated to.

For Admin Use

• Not duplicate issue
• Appropriate labels applied
• Appropriate contributors tagged
• Contributor assigned/self-assigned