Nice explainer on revoking smart contracts or checking existing permissions via Metamask https://support.metamask.io/hc/en-us/articles/4446106184731-How-to-revoke-smart-contract-allowances-token-approvals