indy-node
indy-node copied to clipboard
Determine ACLs on who is allowed to request, receive and store additional metrics for `validator-info`
@lohanspies, Who is best equipped to start this investigation, and where is the relevant resource material?
@WadeBarnes, here is the Sovrin technical policy document - https://sovrin.org/wp-content/uploads/Steward-Technical-and-Organizational-Policies-V2.pdf
What do you foresee as being part of the initial investigation?
- Find/Create an ACL matrix defining what ledger roles have the authority to call the
get-validator-infotransaction, and indicate what, if any data is filtered out for the given roles. As indicated here, https://github.com/hyperledger/indy-node/issues/1669#issue-837084055, there are differences between the results of the local (on the node) call tovalidator-infoand the remote call toget-validator-info. - Determine which roles should have authority to collect the new data elements.
- Update the matrix accordingly.
- Implement data filtering on
get-validator-infoas needed based on the updated matrix.