Details
-
Task
-
Status: Complete
-
Medium
-
Resolution: Done
-
None
-
None
-
None
-
Ev-Node 19.05, Ev-Node 19.06
-
Unset
Description
As of now, there are no write permissions for REVOC_REG_DEF and REVOC_REG_ENTRY txns.
https://github.com/hyperledger/indy-node/blob/master/indy_node/test/nym_txn/test_nym_auth_rules.py
Accepatance criteria:
Add tests and enhance permissions so that
- if ANYONE_CAN_WRITE=True
- REVOC_REG_DEF:
- Anyone can create new REVOC_REG_DEF
- Only owners can edit existing REVOC_REG_DEF
- REVOC_REG_ENTRY:
- Only the owner of the corresponding REVOC_REG_DEF can create new REVOC_REG_ENTRY
- Only owners can edit existing REVOC_REG_ENTRY
- REVOC_REG_DEF:
- if ANYONE_CAN_WRITE=False
- REVOC_REG_DEF:
- Only Trustee/Steward/TrustAnchor can create new REVOC_REG_DEF
- Only owners can edit existing REVOC_REG_DEF
- REVOC_REG_ENTRY:
- Only the owner of the corresponding REVOC_REG_DEF can create new REVOC_REG_ENTRY
- Only owners can edit existing REVOC_REG_ENTRY
- REVOC_REG_DEF:
Integration tests makes sense to do in a similar way as for NYM: https://github.com/hyperledger/indy-node/blob/master/indy_node/test/nym_txn/test_nym_auth_rules.py