Add non admin orgs to a channel #fabric #fabric-questions


Mattia Bolzonella
 

Hi all,
I have question about adding an org to a channel. I'm not sure if the vanilla procedure for adding a new organization involves that the latter organization will be an admin of the channel.

In my network I have the need to add organizations to a channel without adding those orgs as admins, it is possible?

Following that, is there a procedure to demote a channel-admin org to be simply a participant of the channel without any admin privilede?

Thanks in advance,
Mattia 


Carlos Eduardo Matos Ellery
 

Hello,

These permissions are defined by the channel policies on the configtx.yaml used for the channel creation. By default, only the majority of Orgs can commit admin changes to a channel. See: https://hyperledger-fabric.readthedocs.io/en/release-2.2/create_channel/create_channel.html

If you want that only a specific Org have admin privileges, than you may change the default policy from:

Application:
  Policies:
    Admins:
      Type: ImplicitMeta
      Rule: "MAJORITY Admins"


To:

Application:
  Policies:
    Admins:
      Type: Signature
      Rule: "OR('YourOrg.admin')"


If the channel is already created, than you'll have to make a config change. That is a bit tricky procedure, and you'll have to get the signature of the majority of admins to commit the change. See: https://hyperledger-fabric.readthedocs.io/en/release-2.2/channel_update_tutorial.html#fetch-the-configuration
Carlos Eduardo Matos Ellery
Em 08/03/2021 11:59, Mattia Bolzonella escreveu:

Hi all,
I have question about adding an org to a channel. I'm not sure if the vanilla procedure for adding a new organization involves that the latter organization will be an admin of the channel.

In my network I have the need to add organizations to a channel without adding those orgs as admins, it is possible?

Following that, is there a procedure to demote a channel-admin org to be simply a participant of the channel without any admin privilede?

Thanks in advance,
Mattia 


Nikhil Gupta
 

Hello,

The signature policy approach would probably be the best one, though you can still try to use the implicit meta policies by either defining a new organization signature policy or removing the admin policy from certain orgs (though that later one may be rejected as not an option). There is a policy specific channel tutorial that helps take you through these issues: Channel policies — hyperledger-fabricdocs master documentation (hyperledger-fabric.readthedocs.io)

Nik


On Fri, Mar 12, 2021 at 7:02 PM Carlos Eduardo Matos Ellery <carlos.ellery@...> wrote:
Hello,

These permissions are defined by the channel policies on the configtx.yaml used for the channel creation. By default, only the majority of Orgs can commit admin changes to a channel. See: https://hyperledger-fabric.readthedocs.io/en/release-2.2/create_channel/create_channel.html

If you want that only a specific Org have admin privileges, than you may change the default policy from:

Application:
  Policies:
    Admins:
      Type: ImplicitMeta
      Rule: "MAJORITY Admins"


To:

Application:
  Policies:
    Admins:
      Type: Signature
      Rule: "OR('YourOrg.admin')"


If the channel is already created, than you'll have to make a config change. That is a bit tricky procedure, and you'll have to get the signature of the majority of admins to commit the change. See: https://hyperledger-fabric.readthedocs.io/en/release-2.2/channel_update_tutorial.html#fetch-the-configuration
Carlos Eduardo Matos Ellery
Em 08/03/2021 11:59, Mattia Bolzonella escreveu:
Hi all,
I have question about adding an org to a channel. I'm not sure if the vanilla procedure for adding a new organization involves that the latter organization will be an admin of the channel.

In my network I have the need to add organizations to a channel without adding those orgs as admins, it is possible?

Following that, is there a procedure to demote a channel-admin org to be simply a participant of the channel without any admin privilede?

Thanks in advance,
Mattia