How to add roles to user's certificate and use them in chaincode?












1















I develop an application on hyperledger fabric with "IBM‌ Blockchain Platform" extension and nodejs. I use "fabric-ca-client v1.3.0" module to enroll users and admins certificate. I want to add roles to users and have access control based on user roles on my chaincode. I try to enroll multiple certificate but always this module enroll certificate with empty roles and affiliation like this:



{"name":"admin","mspid":"Org1MSP","roles":null,"affiliation":"","enrollmentSecret":"","enrollment":{"signingIdentity":"...","identity":{"..."}}}


I found this on this on hyperledger shim documentation about use of roles on chaincode:



const ClientIdentity = require('fabric-shim').ClientIdentity;



let cid = new ClientIdentity(stub); 

object passed to Init() and Invoke() methods

if (cid.assertAttributeValue('hf.role', 'auditor')) {

   // proceed to carry out auditing

}


but I didn't find any solution to how I can register and enroll user that have 'hf.role' attribute






node.js hyperledger-fabric hyperledger-fabric-ca







share|improve this question



























    1















    I develop an application on hyperledger fabric with "IBM‌ Blockchain Platform" extension and nodejs. I use "fabric-ca-client v1.3.0" module to enroll users and admins certificate. I want to add roles to users and have access control based on user roles on my chaincode. I try to enroll multiple certificate but always this module enroll certificate with empty roles and affiliation like this:



    {"name":"admin","mspid":"Org1MSP","roles":null,"affiliation":"","enrollmentSecret":"","enrollment":{"signingIdentity":"...","identity":{"..."}}}


    I found this on this on hyperledger shim documentation about use of roles on chaincode:



    const ClientIdentity = require('fabric-shim').ClientIdentity;
    

    
let cid = new ClientIdentity(stub); 
    
object passed to Init() and Invoke() methods
    
if (cid.assertAttributeValue('hf.role', 'auditor')) {
    
   // proceed to carry out auditing
    
}


    but I didn't find any solution to how I can register and enroll user that have 'hf.role' attribute






    node.js hyperledger-fabric hyperledger-fabric-ca







    share|improve this question

























      1












      1








      1








      I develop an application on hyperledger fabric with "IBM‌ Blockchain Platform" extension and nodejs. I use "fabric-ca-client v1.3.0" module to enroll users and admins certificate. I want to add roles to users and have access control based on user roles on my chaincode. I try to enroll multiple certificate but always this module enroll certificate with empty roles and affiliation like this:



      {"name":"admin","mspid":"Org1MSP","roles":null,"affiliation":"","enrollmentSecret":"","enrollment":{"signingIdentity":"...","identity":{"..."}}}


      I found this on this on hyperledger shim documentation about use of roles on chaincode:



      const ClientIdentity = require('fabric-shim').ClientIdentity;
      

      
let cid = new ClientIdentity(stub); 
      
object passed to Init() and Invoke() methods
      
if (cid.assertAttributeValue('hf.role', 'auditor')) {
      
   // proceed to carry out auditing
      
}


      but I didn't find any solution to how I can register and enroll user that have 'hf.role' attribute






      node.js hyperledger-fabric hyperledger-fabric-ca







      share|improve this question














      I develop an application on hyperledger fabric with "IBM‌ Blockchain Platform" extension and nodejs. I use "fabric-ca-client v1.3.0" module to enroll users and admins certificate. I want to add roles to users and have access control based on user roles on my chaincode. I try to enroll multiple certificate but always this module enroll certificate with empty roles and affiliation like this:



      {"name":"admin","mspid":"Org1MSP","roles":null,"affiliation":"","enrollmentSecret":"","enrollment":{"signingIdentity":"...","identity":{"..."}}}


      I found this on this on hyperledger shim documentation about use of roles on chaincode:



      const ClientIdentity = require('fabric-shim').ClientIdentity;
      

      
let cid = new ClientIdentity(stub); 
      
object passed to Init() and Invoke() methods
      
if (cid.assertAttributeValue('hf.role', 'auditor')) {
      
   // proceed to carry out auditing
      
}


      but I didn't find any solution to how I can register and enroll user that have 'hf.role' attribute






      node.js hyperledger-fabric hyperledger-fabric-ca




      node.js hyperledger-fabric hyperledger-fabric-ca






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Jan 1 at 13:06









      Hojjat JashnniloofarHojjat Jashnniloofar

      435




      435
























          1 Answer
          1






          active

          oldest

          votes


















          1














          you have to register user 1st and then enroll the user. You can do this via cmdline as well as REST. For cmdline while registering user you need to pass additional attributes as:



          --id.attrs 'role=writer:ecert,email=user1@gmail.com'


          then at the time of enroll:



          --enrollment.attrs "role=writer,email,phone:opt"


          In the chaincode you can access the attribute as:



          let cid = new ClientIdentity(stub); 
          
if (cid.assertAttributeValue('role', 'writer')) { .. }





          share|improve this answer























            Your Answer






            StackExchange.ifUsing("editor", function () {
            StackExchange.using("externalEditor", function () {
            StackExchange.using("snippets", function () {
            StackExchange.snippets.init();
            });
            });
            }, "code-snippets");

            StackExchange.ready(function() {
            var channelOptions = {
            tags: "".split(" "),
            id: "1"
            };
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function() {
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled) {
            StackExchange.using("snippets", function() {
            createEditor();
            });
            }
            else {
            createEditor();
            }
            });

            function createEditor() {
            StackExchange.prepareEditor({
            heartbeatType: 'answer',
            autoActivateHeartbeat: false,
            convertImagesToLinks: true,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            imageUploader: {
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            },
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            });


            }
            });














            draft saved

            draft discarded


















            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53995678%2fhow-to-add-roles-to-users-certificate-and-use-them-in-chaincode%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown

























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            1














            you have to register user 1st and then enroll the user. You can do this via cmdline as well as REST. For cmdline while registering user you need to pass additional attributes as:



            --id.attrs 'role=writer:ecert,email=user1@gmail.com'


            then at the time of enroll:



            --enrollment.attrs "role=writer,email,phone:opt"


            In the chaincode you can access the attribute as:



            let cid = new ClientIdentity(stub); 
            
if (cid.assertAttributeValue('role', 'writer')) { .. }





            share|improve this answer




























              1














              you have to register user 1st and then enroll the user. You can do this via cmdline as well as REST. For cmdline while registering user you need to pass additional attributes as:



              --id.attrs 'role=writer:ecert,email=user1@gmail.com'


              then at the time of enroll:



              --enrollment.attrs "role=writer,email,phone:opt"


              In the chaincode you can access the attribute as:



              let cid = new ClientIdentity(stub); 
              
if (cid.assertAttributeValue('role', 'writer')) { .. }





              share|improve this answer


























                1












                1








                1







                you have to register user 1st and then enroll the user. You can do this via cmdline as well as REST. For cmdline while registering user you need to pass additional attributes as:



                --id.attrs 'role=writer:ecert,email=user1@gmail.com'


                then at the time of enroll:



                --enrollment.attrs "role=writer,email,phone:opt"


                In the chaincode you can access the attribute as:



                let cid = new ClientIdentity(stub); 
                
if (cid.assertAttributeValue('role', 'writer')) { .. }





                share|improve this answer













                you have to register user 1st and then enroll the user. You can do this via cmdline as well as REST. For cmdline while registering user you need to pass additional attributes as:



                --id.attrs 'role=writer:ecert,email=user1@gmail.com'


                then at the time of enroll:



                --enrollment.attrs "role=writer,email,phone:opt"


                In the chaincode you can access the attribute as:



                let cid = new ClientIdentity(stub); 
                
if (cid.assertAttributeValue('role', 'writer')) { .. }






                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered Jan 4 at 8:35









                SandeepRSandeepR

                715




                715
































                    draft saved

                    draft discarded




















































                    Thanks for contributing an answer to Stack Overflow!


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid …



                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.


                    To learn more, see our tips on writing great answers.




                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function () {
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53995678%2fhow-to-add-roles-to-users-certificate-and-use-them-in-chaincode%23new-answer', 'question_page');
                    }
                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    Popular posts from this blog

                    MongoDB - Not Authorized To Execute Command

                    Image
                    .everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box; } 0 I have successfully enabled authorization on MongoDB and I have created an account on the admin database and then I created an account for my database called test. The following connection string to connect to my test database works successfully: mongo --host 192.168.17.52 --port 27017 -u user1 -p password --authenticationDatabase test Only problem I have now is, I cannot execute commands such as: show dbs. I get the following error when I try to do so: "errmsg" : "not authorized on admin to execute command { listDatabases: 1.0, lsid: { id: UUID("a1d5bc0d-bc58-485e-b232-270758a89455") }, $db: "admin...
                    Read more

                    in spring boot 2.1 many test slices are not allowed anymore due to multiple @BootstrapWith

                    Image
                    1 I tried to upgrade a yummy sandwich made of two test slices (@JsonTest and @JdbcTest in my case, crunchy test code in between) adding spring boot 2.1 flavour to it. But it seems it was not much of a success. I cannot annotate my tests with many @...Test since they are now each bringing their own XxxTestContextBootstrapper. It used to work when they all used same SpringBootTestContextBootstrapper. @RunWith(SpringRunner.class) @JdbcTest @JsonTest public class Test { @Test public void test() { System.out.printn("Hello, World !"); } } The error I get from BootstrapUtils is illegalStateException : Configuration error: found multiple declarations of @BootstrapWith for test class I understand I might be doing something wrong here but is there an easy way I could load both Json and Jdbc contex...
                    Read more

                    Npm cannot find a required file even through it is in the searched directory

                    Image
                    up vote 0 down vote favorite I got that error: users-Air:pdfuploader user$ npm run start client@0.1.0 start /Users/user/Documents/pdfuploader react-scripts start Could not find a required file. Name: index.html Searched in: /Users/user/Documents/pdfuploader/public npm ERR! code ELIFECYCLE npm ERR! errno 1 npm ERR! client@0.1.0 start: `react-scripts start` npm ERR! Exit status 1 npm ERR! npm ERR! Failed at the client@0.1.0 start script. npm ERR! This is probably not a problem with npm. There is likely additional logging output above. npm ERR! A complete log of this run can be found in: npm ERR! /Users/user/.npm/_logs/2018-11-19T10_19_14_555Z-debug.log users-Air:pdfuploader user$ And the file is in /Users/user/Documents/pdfuploader/public as you can see in my github repository: https://github.c...
                    Read more