Skip to main content

Hyperldeger Fabric Composer : Essential ACLs




hyperledger composer essential acls
hyperledger composer essential acls 


If you don't know how to setup hyperledger composer read this post.
I almost gave 5 days 😅  to add an asset via participants other than Admin. As I get an error about some permission for that kind of participant I was adding that resource permission to that participants ACL.

.. .. And I have almost given 8 system permissions including network and asset registry resources. Actually, I don't find a solution on any blog or documentation, but  (guess what? 😳) I found a solution on someone's GitHub sample project.

That I am sharing here.

Essentials ACL's that has to be applied

[ at least in case you are going to use composer-rest-server ]


// Give NetworkAdmin User Full Access To Every Resouces //

rule NetworkAdminUser {

    description: "network administrators full access to user resources"
    participant: "org.hyperledger.composer.system.NetworkAdmin"
    operation: ALL
    resource: "**"
    action: ALLOW
}

rule NetworkAdminSystem {

    description: "network admin full access to system resources"
    participant: "org.hyperledger.composer.system.NetworkAdmin"
    operation: ALL
    resource: "org.hyperledger.composer.system.**"
    action: ALLOW
}

// This is a critical ACL. It provides every participant access to // Just composer system. 

// on top of which your system & composer-rest-server going to work.

rule SystemACL {

    description:  "System ACL to permit all access"
    participant: "org.hyperledger.composer.system.Participant"
    operation: ALL
    resource: "org.hyperledger.composer.system.**"
    action: ALLOW
}

// After upper three rules, you can define your systems ACL's 
rule MyRules {
    description:  "System ACL to permit all access"
    participant: "com.mchampaneri.project.Garage"
    operation: ALL
    resource: "com.mchampaneri.project.Car"
    action: ALLOW
}


Hope You will find this useful.

Stay tuned for further Posts on hyper ledger fabric composer.

Have a nice Day :)

Comments

Popular posts from this blog

Google blogger Ideas panel

Google blogger Ideas  I opened by blogger today, and..   I got this.  Google blogger Ideas  A panel suggesting a topic on which I can write my next blog. It's fetching unanswered question from web according to your previous post and topics. It was something, I was really looking for, after all it takes time to finding subject on which to write next and still being in the same niche.  Awesome feature Blogger! 

Apache : setup basic auth with apache in windows

Authentication is any process by which you verify that someone is who they claim they are. Authorization is any process by which someone is allowed to be where they want to go or to have information that they want to have. I will show here how to set up basic auth on the apache with windows. Pre-requests  Windows VPS Apache server ( That's it ) ( In windows it might be difficult to setup the Apache alone. So instead use something ling xampp , wamp or laragon .) RestClient (  I personally use the postman , but you can use your preferable client)  Windows VPS provider Steps  Enable the necessary modules in the Apache Create the password file Set the auth directives in the virtual host file. Verify basic auth. Enable the  necessary   modules  in the Apache Open the httpd.conf file in the apache's conf folder. httpd.conf file Enable the necessary modules to make the basic auth working. Necessary modules  mod_auth_basic

Firebase - update a spacific fields of single element of object of array in firestore

Firebase - update a spacific fields of single element of object of array in firestore  Its actully advisable to use map instead of array when ever it is possible. But, there are cetain cases where you don't have option to do so.  For example, you are directly saving the response from some outer source without any modification and they send you an array. In this case you will have array to work with. Firestore does not support array here is why  "bad things can happen if you have multiple clients all trying to update or delete array elements at specific indexes. In the past, Cloud Firestore addressed these issues by limiting what you can do with arrays " For more details information you can refer to Kato Richardson post Best Practices: Arrays in Firebase .  Firestore document having array [ used from stackoverflow question ] Suppose you have array of object something like shown in array. Now you want to update endTime field of the object on the index [1]