feat(runtimes): add call filter: forbid Session & Membership calls

runtime/common/src/pallets_config.rs

@@ -27,7 +27,7 @@ macro_rules! pallets_config {
 
         impl frame_system::Config for Runtime {
             /// The basic call filter to use in dispatchable.
-            type BaseCallFilter = frame_support::traits::Everything;
+            type BaseCallFilter = BaseCallFilter;
             /// Block & extrinsics weights: base values and limits.
             type BlockWeights = BlockWeights;
             /// The maximum length of a block (in bytes).

runtime/g1/src/lib.rs

@@ -140,6 +140,17 @@ pub type Executive = frame_executive::Executive<
     AllPalletsWithSystem,
 >;
 
+pub struct BaseCallFilter;
+impl frame_support::traits::Contains<Call> for BaseCallFilter {
+    fn contains(call: &Call) -> bool {
+        match call {
+            Call::Membership(_) => false,
+            Call::Session(_) => false,
+            _ => true,
+        }
+    }
+}
+
 common_runtime_except_gdev::pallets_config! {
     impl pallet_sudo::Config for Runtime {
         type Event = Event;

runtime/gdev/src/lib.rs

@@ -132,6 +132,16 @@ pub type Executive = frame_executive::Executive<
     AllPalletsWithSystem,
 >;
 
+pub struct BaseCallFilter;
+impl frame_support::traits::Contains<Call> for BaseCallFilter {
+    fn contains(call: &Call) -> bool {
+        match call {
+            Call::Membership(_) => false,
+            _ => true,
+        }
+    }
+}
+
 // Configure FRAME pallets to include in runtime.
 common_runtime::pallets_config! {
     impl pallet_sudo::Config for Runtime {

runtime/gtest/src/lib.rs

@@ -140,6 +140,17 @@ pub type Executive = frame_executive::Executive<
     AllPalletsWithSystem,
 >;
 
+pub struct BaseCallFilter;
+impl frame_support::traits::Contains<Call> for BaseCallFilter {
+    fn contains(call: &Call) -> bool {
+        match call {
+            Call::Membership(_) => false,
+            Call::Session(_) => false,
+            _ => true,
+        }
+    }
+}
+
 common_runtime_except_gdev::pallets_config! {
     impl pallet_sudo::Config for Runtime {
         type Event = Event;