git.delta.rocks / unique-network / refs/commits / e5fa9afed8bd

difftreelog

fix disallow xcm teleports completely

Daniel Shiposha2023-03-22parent: #1505aad.patch.diff
in: master

3 files changed

modifiedruntime/common/config/xcm/foreignassets.rsdiffbeforeafterboth
--- a/runtime/common/config/xcm/foreignassets.rs
+++ b/runtime/common/config/xcm/foreignassets.rs
@@ -15,13 +15,13 @@
 // along with Unique Network. If not, see <http://www.gnu.org/licenses/>.
 
 use frame_support::{
-	traits::{Contains, Get, fungibles, ContainsPair},
+	traits::{Get, ContainsPair},
 	parameter_types,
 };
 use sp_runtime::traits::Convert;
-use xcm::latest::{MultiAsset, Junction::*, MultiLocation, Junctions::*};
-use xcm_builder::{FungiblesAdapter, NonLocalMint, ConvertedConcreteId};
-use xcm_executor::traits::{Convert as ConvertXcm, JustTry};
+use xcm::latest::{prelude::*, MultiAsset, MultiLocation};
+use xcm_builder::{FungiblesAdapter, NoChecking, ConvertedConcreteId};
+use xcm_executor::traits::{TransactAsset, Convert as ConvertXcm, JustTry};
 use pallet_foreign_assets::{
 	AssetIds, AssetIdMapping, XcmForeignAssetIdMapping, NativeCurrency, FreeForAll, TryAsForeign,
 	ForeignAssetId, CurrencyId,
@@ -36,20 +36,7 @@
 parameter_types! {
 	pub CheckingAccount: AccountId = PolkadotXcm::check_account();
 }
-
-/// No teleports are allowed
-pub struct NoTeleports<AccountId, ForeignAssets>(PhantomData<(AccountId, ForeignAssets)>);
 
-impl<AccountId, ForeignAssets> Contains<<ForeignAssets as fungibles::Inspect<AccountId>>::AssetId>
-	for NoTeleports<AccountId, ForeignAssets>
-where
-	ForeignAssets: fungibles::Inspect<AccountId>,
-{
-	fn contains(_id: &<ForeignAssets as fungibles::Inspect<AccountId>>::AssetId) -> bool {
-		false
-	}
-}
-
 pub struct AsInnerId<AssetId, ConvertAssetId>(PhantomData<(AssetId, ConvertAssetId)>);
 impl<AssetId: Clone + PartialEq, ConvertAssetId: ConvertXcm<AssetId, AssetId>>
 	ConvertXcm<MultiLocation, AssetId> for AsInnerId<AssetId, ConvertAssetId>
@@ -131,14 +118,56 @@
 	LocationToAccountId,
 	// Our chain's account ID type (we can't get away without mentioning it explicitly):
 	AccountId,
-	// No teleports are allowed
-	NonLocalMint<NoTeleports<AccountId, ForeignAssets>>,
+	// No Checking for teleported assets since we disallow teleports at all.
+	NoChecking,
 	// The account to use for tracking teleports.
 	CheckingAccount,
 >;
 
 /// Means for transacting assets on this chain.
-pub type AssetTransactors = FungiblesTransactor;
+pub struct AssetTransactor;
+impl TransactAsset for AssetTransactor {
+	fn can_check_in(
+		_origin: &MultiLocation,
+		_what: &MultiAsset,
+		_context: &XcmContext,
+	) -> XcmResult {
+		Err(XcmError::Unimplemented)
+	}
+
+	fn check_in(_origin: &MultiLocation, _what: &MultiAsset, _context: &XcmContext) {}
+
+	fn can_check_out(
+		_dest: &MultiLocation,
+		_what: &MultiAsset,
+		_context: &XcmContext,
+	) -> XcmResult {
+		Err(XcmError::Unimplemented)
+	}
+
+	fn check_out(_dest: &MultiLocation, _what: &MultiAsset, _context: &XcmContext) {}
+
+	fn deposit_asset(what: &MultiAsset, who: &MultiLocation, context: &XcmContext) -> XcmResult {
+		FungiblesTransactor::deposit_asset(what, who, context)
+	}
+
+	fn withdraw_asset(
+		what: &MultiAsset,
+		who: &MultiLocation,
+		maybe_context: Option<&XcmContext>,
+	) -> Result<xcm_executor::Assets, XcmError> {
+		FungiblesTransactor::withdraw_asset(what, who, maybe_context)
+	}
+
+	fn internal_transfer_asset(
+		what: &MultiAsset,
+		from: &MultiLocation,
+		to: &MultiLocation,
+		context: &XcmContext,
+	) -> Result<xcm_executor::Assets, XcmError> {
+		FungiblesTransactor::internal_transfer_asset(what, from, to, context)
+	}
+}
 
 pub struct AllAsset;
 impl ContainsPair<MultiAsset, MultiLocation> for AllAsset {
modifiedruntime/common/config/xcm/mod.rsdiffbeforeafterboth
before · runtime/common/config/xcm/mod.rs
1// Copyright 2019-2022 Unique Network (Gibraltar) Ltd.2// This file is part of Unique Network.34// Unique Network is free software: you can redistribute it and/or modify5// it under the terms of the GNU General Public License as published by6// the Free Software Foundation, either version 3 of the License, or7// (at your option) any later version.89// Unique Network is distributed in the hope that it will be useful,10// but WITHOUT ANY WARRANTY; without even the implied warranty of11// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the12// GNU General Public License for more details.1314// You should have received a copy of the GNU General Public License15// along with Unique Network. If not, see <http://www.gnu.org/licenses/>.1617use frame_support::{18	traits::{Everything, Nothing, Get, ConstU32},19	parameter_types,20};21use frame_system::EnsureRoot;22use pallet_xcm::XcmPassthrough;23use polkadot_parachain::primitives::Sibling;24use xcm::latest::{prelude::*, Weight, MultiLocation};25use xcm::v3::Instruction;26use xcm_builder::{27	AccountId32Aliases, EnsureXcmOrigin, FixedWeightBounds, ParentAsSuperuser, RelayChainAsNative,28	SiblingParachainAsNative, SiblingParachainConvertsVia, SignedAccountId32AsNative,29	SignedToAccountId32, SovereignSignedViaLocation, ParentIsPreset,30};31use xcm_executor::{Config, XcmExecutor, traits::ShouldExecute};32use sp_std::{marker::PhantomData, vec::Vec};33use crate::{34	Runtime, RuntimeCall, RuntimeEvent, RuntimeOrigin, ParachainInfo, ParachainSystem, PolkadotXcm,35	XcmpQueue, xcm_barrier::Barrier, RelayNetwork, AllPalletsWithSystem, Balances,36};3738use up_common::types::AccountId;3940#[cfg(feature = "foreign-assets")]41pub mod foreignassets;4243#[cfg(not(feature = "foreign-assets"))]44pub mod nativeassets;4546#[cfg(feature = "foreign-assets")]47pub use foreignassets as xcm_assets;4849#[cfg(not(feature = "foreign-assets"))]50pub use nativeassets as xcm_assets;5152use xcm_assets::{AssetTransactors, IsReserve, Trader};5354parameter_types! {55	pub const RelayLocation: MultiLocation = MultiLocation::parent();56	pub RelayOrigin: RuntimeOrigin = cumulus_pallet_xcm::Origin::Relay.into();57	pub UniversalLocation: InteriorMultiLocation = X2(GlobalConsensus(RelayNetwork::get()), Parachain(ParachainInfo::get().into()));58	pub SelfLocation: MultiLocation = MultiLocation::new(1, X1(Parachain(ParachainInfo::get().into())));5960	// One XCM operation is 1_000_000 weight - almost certainly a conservative estimate.61	pub UnitWeightCost: Weight = Weight::from_parts(1_000_000, 1000); // ?62	pub const MaxInstructions: u32 = 100;63}6465/// Type for specifying how a `MultiLocation` can be converted into an `AccountId`. This is used66/// when determining ownership of accounts for asset transacting and when attempting to use XCM67/// `Transact` in order to determine the dispatch Origin.68pub type LocationToAccountId = (69	// The parent (Relay-chain) origin converts to the default `AccountId`.70	ParentIsPreset<AccountId>,71	// Sibling parachain origins convert to AccountId via the `ParaId::into`.72	SiblingParachainConvertsVia<Sibling, AccountId>,73	// Straight up local `AccountId32` origins just alias directly to `AccountId`.74	AccountId32Aliases<RelayNetwork, AccountId>,75);7677/// No local origins on this chain are allowed to dispatch XCM sends/executions.78pub type LocalOriginToLocation = (SignedToAccountId32<RuntimeOrigin, AccountId, RelayNetwork>,);7980/// The means for routing XCM messages which are not for local execution into the right message81/// queues.82pub type XcmRouter = (83	// Two routers - use UMP to communicate with the relay chain:84	cumulus_primitives_utility::ParentAsUmp<ParachainSystem, PolkadotXcm, ()>,85	// ..and XCMP to communicate with the sibling chains.86	XcmpQueue,87);8889/// This is the type we use to convert an (incoming) XCM origin into a local `Origin` instance,90/// ready for dispatching a transaction with Xcm's `Transact`. There is an `OriginKind` which can91/// biases the kind of local `Origin` it will become.92pub type XcmOriginToTransactDispatchOrigin = (93	// Sovereign account converter; this attempts to derive an `AccountId` from the origin location94	// using `LocationToAccountId` and then turn that into the usual `Signed` origin. Useful for95	// foreign chains who want to have a local sovereign account on this chain which they control.96	SovereignSignedViaLocation<LocationToAccountId, RuntimeOrigin>,97	// Native converter for Relay-chain (Parent) location; will converts to a `Relay` origin when98	// recognised.99	RelayChainAsNative<RelayOrigin, RuntimeOrigin>,100	// Native converter for sibling Parachains; will convert to a `SiblingPara` origin when101	// recognised.102	SiblingParachainAsNative<cumulus_pallet_xcm::Origin, RuntimeOrigin>,103	// Superuser converter for the Relay-chain (Parent) location. This will allow it to issue a104	// transaction from the Root origin.105	ParentAsSuperuser<RuntimeOrigin>,106	// Native signed account converter; this just converts an `AccountId32` origin into a normal107	// `Origin::Signed` origin of the same 32-byte value.108	SignedAccountId32AsNative<RelayNetwork, RuntimeOrigin>,109	// Xcm origins can be represented natively under the Xcm pallet's Xcm origin.110	XcmPassthrough<RuntimeOrigin>,111);112113pub trait TryPass {114	fn try_pass<Call>(origin: &MultiLocation, message: &mut [Instruction<Call>]) -> Result<(), ()>;115}116117#[impl_trait_for_tuples::impl_for_tuples(30)]118impl TryPass for Tuple {119	fn try_pass<Call>(origin: &MultiLocation, message: &mut [Instruction<Call>]) -> Result<(), ()> {120		for_tuples!( #(121			Tuple::try_pass(origin, message)?;122		)* );123124		Ok(())125	}126}127128pub struct DenyTransact;129impl TryPass for DenyTransact {130	fn try_pass<Call>(131		_origin: &MultiLocation,132		message: &mut [Instruction<Call>],133	) -> Result<(), ()> {134		let transact_inst = message135			.iter()136			.find(|inst| matches![inst, Instruction::Transact { .. }]);137138		if transact_inst.is_some() {139			log::warn!(140				target: "xcm::barrier",141				"transact XCM rejected"142			);143144			Err(())145		} else {146			Ok(())147		}148	}149}150151/// Deny executing the XCM if it matches any of the Deny filter regardless of anything else.152/// If it passes the Deny, and matches one of the Allow cases then it is let through.153pub struct DenyThenTry<Deny, Allow>(PhantomData<Deny>, PhantomData<Allow>)154where155	Deny: TryPass,156	Allow: ShouldExecute;157158impl<Deny, Allow> ShouldExecute for DenyThenTry<Deny, Allow>159where160	Deny: TryPass,161	Allow: ShouldExecute,162{163	fn should_execute<Call>(164		origin: &MultiLocation,165		message: &mut [Instruction<Call>],166		max_weight: Weight,167		weight_credit: &mut Weight,168	) -> Result<(), ()> {169		Deny::try_pass(origin, message)?;170		Allow::should_execute(origin, message, max_weight, weight_credit)171	}172}173174// Allow xcm exchange only with locations in list175pub struct DenyExchangeWithUnknownLocation<T>(PhantomData<T>);176impl<T: Get<Vec<MultiLocation>>> TryPass for DenyExchangeWithUnknownLocation<T> {177	fn try_pass<Call>(origin: &MultiLocation, message: &mut [Instruction<Call>]) -> Result<(), ()> {178		let allowed_locations = T::get();179180		// Check if deposit or transfer belongs to allowed parachains181		let mut allowed = allowed_locations.contains(origin);182183		message.iter().for_each(|inst| match inst {184			DepositReserveAsset { dest: dst, .. }185			| TransferReserveAsset { dest: dst, .. }186			| InitiateReserveWithdraw { reserve: dst, .. } => {187				allowed |= allowed_locations.contains(&dst);188			}189			// ? There are more instructions worth checking190			_ => {}191		});192193		if allowed {194			return Ok(());195		}196197		log::warn!(198			target: "xcm::barrier",199			"Unexpected deposit or transfer location"200		);201		// Deny202		Err(())203	}204}205206pub type Weigher = FixedWeightBounds<UnitWeightCost, RuntimeCall, MaxInstructions>;207208pub struct XcmConfig<T>(PhantomData<T>);209impl<T> Config for XcmConfig<T>210where211	T: pallet_configuration::Config,212{213	type RuntimeCall = RuntimeCall;214	type XcmSender = XcmRouter;215	// How to withdraw and deposit an asset.216	type AssetTransactor = AssetTransactors;217	type OriginConverter = XcmOriginToTransactDispatchOrigin;218	type IsReserve = IsReserve;219	type IsTeleporter = (); // Teleportation is disabled220	type UniversalLocation = UniversalLocation;221	type Barrier = Barrier;222	type Weigher = Weigher;223	type Trader = Trader<T>;224	type ResponseHandler = PolkadotXcm;225	type SubscriptionService = PolkadotXcm;226	type PalletInstancesInfo = AllPalletsWithSystem;227	type MaxAssetsIntoHolding = ConstU32<8>;228229	type AssetTrap = PolkadotXcm;230	type AssetClaims = PolkadotXcm;231	type AssetLocker = ();232	type AssetExchanger = ();233	type FeeManager = ();234	type MessageExporter = ();235	type UniversalAliases = Nothing;236	type CallDispatcher = RuntimeCall;237	type SafeCallFilter = Nothing; // ? Only non-recursive calls may go here, but do we need this?238}239240#[cfg(feature = "runtime-benchmarks")]241parameter_types! {242	pub ReachableDest: Option<MultiLocation> = Some(Parent.into());243}244245impl pallet_xcm::Config for Runtime {246	type RuntimeEvent = RuntimeEvent;247	type SendXcmOrigin = EnsureXcmOrigin<RuntimeOrigin, LocalOriginToLocation>;248	type XcmRouter = XcmRouter;249	type ExecuteXcmOrigin = EnsureXcmOrigin<RuntimeOrigin, LocalOriginToLocation>;250	type XcmExecuteFilter = Everything;251	type XcmExecutor = XcmExecutor<XcmConfig<Self>>;252	type XcmTeleportFilter = Everything;253	type XcmReserveTransferFilter = Everything;254	type Weigher = FixedWeightBounds<UnitWeightCost, RuntimeCall, MaxInstructions>;255	type RuntimeOrigin = RuntimeOrigin;256	type RuntimeCall = RuntimeCall;257	const VERSION_DISCOVERY_QUEUE_SIZE: u32 = 100;258	type AdvertisedXcmVersion = pallet_xcm::CurrentXcmVersion;259	type UniversalLocation = UniversalLocation;260	type Currency = Balances;261	type CurrencyMatcher = ();262	type TrustedLockers = ();263	type SovereignAccountOf = LocationToAccountId;264	type MaxLockers = ConstU32<8>;265	type WeightInfo = crate::weights::xcm::SubstrateWeight<Runtime>;266	#[cfg(feature = "runtime-benchmarks")]267	type ReachableDest = ReachableDest;268}269270impl cumulus_pallet_xcm::Config for Runtime {271	type RuntimeEvent = RuntimeEvent;272	type XcmExecutor = XcmExecutor<XcmConfig<Self>>;273}274275impl cumulus_pallet_xcmp_queue::Config for Runtime {276	type WeightInfo = ();277	type RuntimeEvent = RuntimeEvent;278	type XcmExecutor = XcmExecutor<XcmConfig<Self>>;279	type ChannelInfo = ParachainSystem;280	type VersionWrapper = ();281	type ExecuteOverweightOrigin = frame_system::EnsureRoot<AccountId>;282	type ControllerOrigin = EnsureRoot<AccountId>;283	type ControllerOriginConverter = XcmOriginToTransactDispatchOrigin;284	type PriceForSiblingDelivery = ();285}286287impl cumulus_pallet_dmp_queue::Config for Runtime {288	type RuntimeEvent = RuntimeEvent;289	type XcmExecutor = XcmExecutor<XcmConfig<Self>>;290	type ExecuteOverweightOrigin = frame_system::EnsureRoot<AccountId>;291}
after · runtime/common/config/xcm/mod.rs
1// Copyright 2019-2022 Unique Network (Gibraltar) Ltd.2// This file is part of Unique Network.34// Unique Network is free software: you can redistribute it and/or modify5// it under the terms of the GNU General Public License as published by6// the Free Software Foundation, either version 3 of the License, or7// (at your option) any later version.89// Unique Network is distributed in the hope that it will be useful,10// but WITHOUT ANY WARRANTY; without even the implied warranty of11// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the12// GNU General Public License for more details.1314// You should have received a copy of the GNU General Public License15// along with Unique Network. If not, see <http://www.gnu.org/licenses/>.1617use frame_support::{18	traits::{Everything, Nothing, Get, ConstU32},19	parameter_types,20};21use frame_system::EnsureRoot;22use pallet_xcm::XcmPassthrough;23use polkadot_parachain::primitives::Sibling;24use xcm::latest::{prelude::*, Weight, MultiLocation};25use xcm::v3::Instruction;26use xcm_builder::{27	AccountId32Aliases, EnsureXcmOrigin, FixedWeightBounds, ParentAsSuperuser, RelayChainAsNative,28	SiblingParachainAsNative, SiblingParachainConvertsVia, SignedAccountId32AsNative,29	SignedToAccountId32, SovereignSignedViaLocation, ParentIsPreset,30};31use xcm_executor::{Config, XcmExecutor, traits::ShouldExecute};32use sp_std::{marker::PhantomData, vec::Vec};33use crate::{34	Runtime, RuntimeCall, RuntimeEvent, RuntimeOrigin, ParachainInfo, ParachainSystem, PolkadotXcm,35	XcmpQueue, xcm_barrier::Barrier, RelayNetwork, AllPalletsWithSystem, Balances,36};3738use up_common::types::AccountId;3940#[cfg(feature = "foreign-assets")]41pub mod foreignassets;4243#[cfg(not(feature = "foreign-assets"))]44pub mod nativeassets;4546#[cfg(feature = "foreign-assets")]47pub use foreignassets as xcm_assets;4849#[cfg(not(feature = "foreign-assets"))]50pub use nativeassets as xcm_assets;5152use xcm_assets::{AssetTransactor, IsReserve, Trader};5354parameter_types! {55	pub const RelayLocation: MultiLocation = MultiLocation::parent();56	pub RelayOrigin: RuntimeOrigin = cumulus_pallet_xcm::Origin::Relay.into();57	pub UniversalLocation: InteriorMultiLocation = X2(GlobalConsensus(RelayNetwork::get()), Parachain(ParachainInfo::get().into()));58	pub SelfLocation: MultiLocation = MultiLocation::new(1, X1(Parachain(ParachainInfo::get().into())));5960	// One XCM operation is 1_000_000 weight - almost certainly a conservative estimate.61	pub UnitWeightCost: Weight = Weight::from_parts(1_000_000, 1000); // ?62	pub const MaxInstructions: u32 = 100;63}6465/// Type for specifying how a `MultiLocation` can be converted into an `AccountId`. This is used66/// when determining ownership of accounts for asset transacting and when attempting to use XCM67/// `Transact` in order to determine the dispatch Origin.68pub type LocationToAccountId = (69	// The parent (Relay-chain) origin converts to the default `AccountId`.70	ParentIsPreset<AccountId>,71	// Sibling parachain origins convert to AccountId via the `ParaId::into`.72	SiblingParachainConvertsVia<Sibling, AccountId>,73	// Straight up local `AccountId32` origins just alias directly to `AccountId`.74	AccountId32Aliases<RelayNetwork, AccountId>,75);7677/// No local origins on this chain are allowed to dispatch XCM sends/executions.78pub type LocalOriginToLocation = (SignedToAccountId32<RuntimeOrigin, AccountId, RelayNetwork>,);7980/// The means for routing XCM messages which are not for local execution into the right message81/// queues.82pub type XcmRouter = (83	// Two routers - use UMP to communicate with the relay chain:84	cumulus_primitives_utility::ParentAsUmp<ParachainSystem, PolkadotXcm, ()>,85	// ..and XCMP to communicate with the sibling chains.86	XcmpQueue,87);8889/// This is the type we use to convert an (incoming) XCM origin into a local `Origin` instance,90/// ready for dispatching a transaction with Xcm's `Transact`. There is an `OriginKind` which can91/// biases the kind of local `Origin` it will become.92pub type XcmOriginToTransactDispatchOrigin = (93	// Sovereign account converter; this attempts to derive an `AccountId` from the origin location94	// using `LocationToAccountId` and then turn that into the usual `Signed` origin. Useful for95	// foreign chains who want to have a local sovereign account on this chain which they control.96	SovereignSignedViaLocation<LocationToAccountId, RuntimeOrigin>,97	// Native converter for Relay-chain (Parent) location; will converts to a `Relay` origin when98	// recognised.99	RelayChainAsNative<RelayOrigin, RuntimeOrigin>,100	// Native converter for sibling Parachains; will convert to a `SiblingPara` origin when101	// recognised.102	SiblingParachainAsNative<cumulus_pallet_xcm::Origin, RuntimeOrigin>,103	// Superuser converter for the Relay-chain (Parent) location. This will allow it to issue a104	// transaction from the Root origin.105	ParentAsSuperuser<RuntimeOrigin>,106	// Native signed account converter; this just converts an `AccountId32` origin into a normal107	// `Origin::Signed` origin of the same 32-byte value.108	SignedAccountId32AsNative<RelayNetwork, RuntimeOrigin>,109	// Xcm origins can be represented natively under the Xcm pallet's Xcm origin.110	XcmPassthrough<RuntimeOrigin>,111);112113pub trait TryPass {114	fn try_pass<Call>(origin: &MultiLocation, message: &mut [Instruction<Call>]) -> Result<(), ()>;115}116117#[impl_trait_for_tuples::impl_for_tuples(30)]118impl TryPass for Tuple {119	fn try_pass<Call>(origin: &MultiLocation, message: &mut [Instruction<Call>]) -> Result<(), ()> {120		for_tuples!( #(121			Tuple::try_pass(origin, message)?;122		)* );123124		Ok(())125	}126}127128pub struct DenyTransact;129impl TryPass for DenyTransact {130	fn try_pass<Call>(131		_origin: &MultiLocation,132		message: &mut [Instruction<Call>],133	) -> Result<(), ()> {134		let transact_inst = message135			.iter()136			.find(|inst| matches![inst, Instruction::Transact { .. }]);137138		if transact_inst.is_some() {139			log::warn!(140				target: "xcm::barrier",141				"transact XCM rejected"142			);143144			Err(())145		} else {146			Ok(())147		}148	}149}150151/// Deny executing the XCM if it matches any of the Deny filter regardless of anything else.152/// If it passes the Deny, and matches one of the Allow cases then it is let through.153pub struct DenyThenTry<Deny, Allow>(PhantomData<Deny>, PhantomData<Allow>)154where155	Deny: TryPass,156	Allow: ShouldExecute;157158impl<Deny, Allow> ShouldExecute for DenyThenTry<Deny, Allow>159where160	Deny: TryPass,161	Allow: ShouldExecute,162{163	fn should_execute<Call>(164		origin: &MultiLocation,165		message: &mut [Instruction<Call>],166		max_weight: Weight,167		weight_credit: &mut Weight,168	) -> Result<(), ()> {169		Deny::try_pass(origin, message)?;170		Allow::should_execute(origin, message, max_weight, weight_credit)171	}172}173174// Allow xcm exchange only with locations in list175pub struct DenyExchangeWithUnknownLocation<T>(PhantomData<T>);176impl<T: Get<Vec<MultiLocation>>> TryPass for DenyExchangeWithUnknownLocation<T> {177	fn try_pass<Call>(origin: &MultiLocation, message: &mut [Instruction<Call>]) -> Result<(), ()> {178		let allowed_locations = T::get();179180		// Check if deposit or transfer belongs to allowed parachains181		let mut allowed = allowed_locations.contains(origin);182183		message.iter().for_each(|inst| match inst {184			DepositReserveAsset { dest: dst, .. }185			| TransferReserveAsset { dest: dst, .. }186			| InitiateReserveWithdraw { reserve: dst, .. } => {187				allowed |= allowed_locations.contains(&dst);188			}189			// ? There are more instructions worth checking190			_ => {}191		});192193		if allowed {194			return Ok(());195		}196197		log::warn!(198			target: "xcm::barrier",199			"Unexpected deposit or transfer location"200		);201		// Deny202		Err(())203	}204}205206pub type Weigher = FixedWeightBounds<UnitWeightCost, RuntimeCall, MaxInstructions>;207208pub struct XcmConfig<T>(PhantomData<T>);209impl<T> Config for XcmConfig<T>210where211	T: pallet_configuration::Config,212{213	type RuntimeCall = RuntimeCall;214	type XcmSender = XcmRouter;215	// How to withdraw and deposit an asset.216	type AssetTransactor = AssetTransactor;217	type OriginConverter = XcmOriginToTransactDispatchOrigin;218	type IsReserve = IsReserve;219	type IsTeleporter = (); // Teleportation is disabled220	type UniversalLocation = UniversalLocation;221	type Barrier = Barrier;222	type Weigher = Weigher;223	type Trader = Trader<T>;224	type ResponseHandler = PolkadotXcm;225	type SubscriptionService = PolkadotXcm;226	type PalletInstancesInfo = AllPalletsWithSystem;227	type MaxAssetsIntoHolding = ConstU32<8>;228229	type AssetTrap = PolkadotXcm;230	type AssetClaims = PolkadotXcm;231	type AssetLocker = ();232	type AssetExchanger = ();233	type FeeManager = ();234	type MessageExporter = ();235	type UniversalAliases = Nothing;236	type CallDispatcher = RuntimeCall;237	type SafeCallFilter = Nothing; // ? Only non-recursive calls may go here, but do we need this?238}239240#[cfg(feature = "runtime-benchmarks")]241parameter_types! {242	pub ReachableDest: Option<MultiLocation> = Some(Parent.into());243}244245impl pallet_xcm::Config for Runtime {246	type RuntimeEvent = RuntimeEvent;247	type SendXcmOrigin = EnsureXcmOrigin<RuntimeOrigin, LocalOriginToLocation>;248	type XcmRouter = XcmRouter;249	type ExecuteXcmOrigin = EnsureXcmOrigin<RuntimeOrigin, LocalOriginToLocation>;250	type XcmExecuteFilter = Everything;251	type XcmExecutor = XcmExecutor<XcmConfig<Self>>;252	type XcmTeleportFilter = Everything;253	type XcmReserveTransferFilter = Everything;254	type Weigher = FixedWeightBounds<UnitWeightCost, RuntimeCall, MaxInstructions>;255	type RuntimeOrigin = RuntimeOrigin;256	type RuntimeCall = RuntimeCall;257	const VERSION_DISCOVERY_QUEUE_SIZE: u32 = 100;258	type AdvertisedXcmVersion = pallet_xcm::CurrentXcmVersion;259	type UniversalLocation = UniversalLocation;260	type Currency = Balances;261	type CurrencyMatcher = ();262	type TrustedLockers = ();263	type SovereignAccountOf = LocationToAccountId;264	type MaxLockers = ConstU32<8>;265	type WeightInfo = crate::weights::xcm::SubstrateWeight<Runtime>;266	#[cfg(feature = "runtime-benchmarks")]267	type ReachableDest = ReachableDest;268}269270impl cumulus_pallet_xcm::Config for Runtime {271	type RuntimeEvent = RuntimeEvent;272	type XcmExecutor = XcmExecutor<XcmConfig<Self>>;273}274275impl cumulus_pallet_xcmp_queue::Config for Runtime {276	type WeightInfo = ();277	type RuntimeEvent = RuntimeEvent;278	type XcmExecutor = XcmExecutor<XcmConfig<Self>>;279	type ChannelInfo = ParachainSystem;280	type VersionWrapper = ();281	type ExecuteOverweightOrigin = frame_system::EnsureRoot<AccountId>;282	type ControllerOrigin = EnsureRoot<AccountId>;283	type ControllerOriginConverter = XcmOriginToTransactDispatchOrigin;284	type PriceForSiblingDelivery = ();285}286287impl cumulus_pallet_dmp_queue::Config for Runtime {288	type RuntimeEvent = RuntimeEvent;289	type XcmExecutor = XcmExecutor<XcmConfig<Self>>;290	type ExecuteOverweightOrigin = frame_system::EnsureRoot<AccountId>;291}
modifiedruntime/common/config/xcm/nativeassets.rsdiffbeforeafterboth
--- a/runtime/common/config/xcm/nativeassets.rs
+++ b/runtime/common/config/xcm/nativeassets.rs
@@ -77,7 +77,7 @@
 	(),
 >;
 
-pub type AssetTransactors = LocalAssetTransactor;
+pub type AssetTransactor = LocalAssetTransactor;
 
 pub type IsReserve = NativeAsset;