Do I need to set authority on newly minted token after I transfer it?

Question

I have a program to mint tokens on behalf of users (with user-provided metadata for the tokens) and after the minting is done, I transfer the token to the user address.

Now, my question is - do I need to Set Authority on the token after it's been transferred?

I'm asking because I want to prevent even myself from having access to the user's token after transfer.

Here's an example token I've minted for a test user. I guess my primary reason for raising this question is the fact that the Update Authority address in Solscan, even after the transfer, is still the account from which the token was minted.

Answer 1

yes if u want that nobody can update the metadata but only the user to whom u r transferring the NFT then u need to transfer the update authority also to the end user. So when u transfer the NFT call this instruction also createUpdateMetadataAccountV2Instruction and change the new_update_authority to the end user's publickey. This will transfer the update authority to the end user and reflect the same in the metadata and solscan