From ac8601168336ab2dc0c8fad4027c3b7d656e981d Mon Sep 17 00:00:00 2001 From: Sijo Cherian Date: Sat, 22 Aug 2020 19:03:30 -0400 Subject: [PATCH] DeleteAsset chaincode does not check for ownership of asset. Will fix chaincode in different PR Signed-off-by: Sijo Cherian --- .../application-javascript/app.js | 13 ------------- 1 file changed, 13 deletions(-) diff --git a/asset-transfer-private-data/application-javascript/app.js b/asset-transfer-private-data/application-javascript/app.js index 4c0edb26..ddfa1308 100644 --- a/asset-transfer-private-data/application-javascript/app.js +++ b/asset-transfer-private-data/application-javascript/app.js @@ -235,19 +235,6 @@ async function main() { console.log('\n********* Demo deleting asset **************'); let dataForDelete = { assetID: assetID2 }; - try { - //Non-owner Org2 should not be able to DeleteAsset. Expect an error from DeleteAsset - console.log('--> Attempt Transaction: as Org2 DeleteAsset ' + assetID2); - statefulTxn = contractOrg2.createTransaction('DeleteAsset'); - tmapData = Buffer.from(JSON.stringify(dataForDelete)); - statefulTxn.setTransient({ - asset_delete: tmapData - }); - result = await statefulTxn.submit(); - console.log('******** FAILED : expected to return an error'); - } catch (error) { - console.log(` Successfully caught the error: \n ${error}`); - } // Delete Asset2 as Org1 console.log('--> Submit Transaction: as Org1 DeleteAsset ' + assetID2); statefulTxn = contractOrg1.createTransaction('DeleteAsset');