wallet: enable/disable_keystore: rm functionality from 2fa wallets

was already not working, but does not even really make sense without larger changes

electrum/gui/qt/wallet_info_dialog.py

@@ -150,16 +150,17 @@ class WalletInfoDialog(WindowModalDialog):
                 bip32fp_hbox.addWidget(bip32fp_text)
                 bip32fp_hbox.addStretch()
                 ks_vbox.addLayout(bip32fp_hbox)
-                ks_buttons = []
-                if not ks.is_watching_only():
-                    rm_keystore_button = QPushButton('Disable keystore')
-                    rm_keystore_button.clicked.connect(partial(self.disable_keystore, ks))
-                    ks_buttons.insert(0, rm_keystore_button)
-                else:
-                    add_keystore_button = QPushButton('Enable Keystore')
-                    add_keystore_button.clicked.connect(self.enable_keystore)
-                    ks_buttons.insert(0, add_keystore_button)
-                ks_vbox.addLayout(Buttons(*ks_buttons))
+                if wallet.can_enable_disable_keystore(ks):
+                    ks_buttons = []
+                    if not ks.is_watching_only():
+                        rm_keystore_button = QPushButton('Disable keystore')
+                        rm_keystore_button.clicked.connect(partial(self.disable_keystore, ks))
+                        ks_buttons.insert(0, rm_keystore_button)
+                    else:
+                        add_keystore_button = QPushButton('Enable Keystore')
+                        add_keystore_button.clicked.connect(self.enable_keystore)
+                        ks_buttons.insert(0, add_keystore_button)
+                    ks_vbox.addLayout(Buttons(*ks_buttons))
                 tab_label = _("Cosigner") + f' {idx+1}' if len(keystores) > 1 else _("Keystore")
                 index = self.keystore_tabs.addTab(ks_w, tab_label)
                 if not ks.is_watching_only():

electrum/plugins/trustedcoin/trustedcoin.py

@@ -45,6 +45,7 @@ from electrum.plugin import BasePlugin, hook
 from electrum.util import NotEnoughFunds, UserFacingException, error_text_str_to_safe_str
 from electrum.network import Network
 from electrum.logging import Logger
+from electrum.keystore import KeyStore
 
 if TYPE_CHECKING:
     from electrum.wizard import NewWalletWizard
@@ -382,6 +383,15 @@ class Wallet_2fa(Multisig_Wallet):
     def is_billing_address(self, addr: str) -> bool:
         return addr in self._billing_addresses_set
 
+    def can_enable_disable_keystore(self, ks: KeyStore) -> bool:
+        return False
+
+    def enable_keystore(self, keystore, is_hardware_keystore, password):
+        raise Exception("2fa wallet cannot enable keystore")
+
+    def disable_keystore(self, keystore):
+        raise Exception("2fa wallet cannot disable keystore")
+
 
 # Utility functions
 

electrum/wallet.py

@@ -3261,6 +3261,12 @@ class Abstract_Wallet(ABC, Logger, EventListener):
     def save_keystore(self):
         pass
 
+    def can_enable_disable_keystore(self, ks: KeyStore) -> bool:
+        """Whether the wallet is capable of disabling/enabling the given keystore.
+        This is a necessary but not sufficient check: e.g. if wallet has LN channels, we should not allow disabling.
+        """
+        return False
+
     def enable_keystore(self, keystore: KeyStore, is_hardware_keystore: bool, password) -> None:
         raise NotImplementedError()
 
@@ -4039,14 +4045,20 @@ class Deterministic_Wallet(Abstract_Wallet):
     def get_txin_type(self, address=None):
         return self.txin_type
 
+    def can_enable_disable_keystore(self, ks: KeyStore) -> bool:
+        return True
+
     def enable_keystore(self, keystore: KeyStore, is_hardware_keystore: bool, password) -> None:
+        assert self.can_enable_disable_keystore(keystore)
         if not is_hardware_keystore and self.storage.is_encrypted_with_user_pw():
             keystore.update_password(None, password)
             self.db.put('use_encryption', True)
         self._update_keystore(keystore)
 
     def disable_keystore(self, keystore: KeyStore) -> None:
+        assert self.can_enable_disable_keystore(keystore)
         assert not self.has_channels()
+        assert keystore in self.get_keystores()
         if hasattr(keystore, 'thread') and keystore.thread:
             keystore.thread.stop()
         if self.storage.is_encrypted_with_hw_device():