PITFALL.md

Pitfalls

ACL

condition and param binding:

• does not support binding of "ANY"

rule AnyParticipantMatchingRule {
  description: "the precondition matching would always fail"
  participant(m): "ANY"
  operation: ALL
  resource(r): "sample.Resource"
  condition: ( r.owner.getIdentifier() == m.getIdentifier() )
  action: ALLOW
}

• cannot use mapping function of arrays in condition, the variables binded does not resolve in precondition matching

rule EntityRule {
  description: "the precondition matching would always fail"
  participant: "ANY"
  operation: ALL
  resource(tx): "sample.Transaction"
  condition: (
    tx.attrs.length >= 1
    && tx.attrs.every(function(attr){ return attr.prop == tx.attrs[0].prop;})
  )
  action: ALLOW
}

Transaction Logic

• cannot declare utility function below transaction handler

/**
 * transaction handler
 * @param {sample.Transaction} tx 
 * @transaction
 */
function txHandler(tx) {
    //do something
    return "";
}

function utility(param) {
    //param will be evaluated when executing txHandler, param will be a resolved transaction
    return "";
}

• cannot update resource via a relationship

//model.cto
model Entity identified by id{
  o String id
  o Long balance
}

model Group identified by id{
  o String id
  --> Entity entity
}

//transaction.script
/**
 * balance transfer
 * @param {sample.TransferBalance} tbTx 
 * @transaction
 */
function txHandler(tbTx) {
    tbTx.group.entity.balance += tbTx.amount;
    return getParticipantRegistry("sample.Group")
        .then(function(pr) {
            //this would fail because group.entity is an relationship
            return pr.update(tbTx.group.entity);
        });
}

• composer-cli archive create does not support cross namespace concept import

the following models cannot be packaged:

//model/a.cto
namespace auction.model.public

/* package would be viable if we change 'concept' to 'abstract participant' or 'participant' */
concept User {
  o String name
}

participant Auctioneer identified by aid extends User {
  o String aid
}

//model/b.cto
namespace auction.model.private

participant Member identified by mid extends User {
  o String mid
}

Deployment

Errors

• "identity is not an admin"

Error: Error trying deploy. Error: Error trying install chaincode. Error: chaincode error (status: 500, message: Authorization for INSTALL has been denied (error-Failed verifying that proposal's creator satisfies local MSP principal during channelless check policy with policy [Admins]: [This identity is not an admin]))

Replace admincerts of peer with the admin's certificate.

• "authorization Failure"

Error: Error trying login and get user Context. Error: Error trying to enroll user. Error: Enrollment failed with errors [[{"code":400,"message":"Authorization failure"}]]

enrollment id/secret does not match

• "failed to authenticate policy"

Error: Error trying deploy. Error: Error trying to instantiate chaincode. Error: chaincode error (status: 500, message: chaincode instantiation policy violated(Failed to authenticate policy))

endorsement policy error: related to signed-by and identity/msp of organization members configured in composer, peers, orderers and channels.