{"push_id":2581831236,"size":2,"distinct_size":2,"ref":"refs/heads/master","head":"b95249d92733b225aa92ff1fd512ab3f146eb3e7","before":"b959477fcf8190ab2940d7275b4e4ef96bdbde33","commits":[{"sha":"c11956784ba7dcb57c0df5270c8c885c0bfdf8b3","author":{"name":"yacovm","email":"632344b5da9bd743456189af4db4b56472defb8c@il.ibm.com"},"message":"[FAB-10238] Filter collections on peers, not principals\n\nThe collection support in the discovery service supports collections by\nfiltering out principal sets that aren't authorized by the principals\nderived from the policy in the collection config.\n\nThis is problematic in cases when the collection config is defined\nwith principals which have no obvious IsA relation with the\nendorsement policy:\nConsider a case where the endorsement policy is defined with principals\nof Org1.peer or and org2.peer, and the collection is\ndefined with OUs of Org.\n\nAny principal based policy can't accept nor reject such a scenario,\nsince a peer role is based on an OU that is hidden from the principal\nitself.\n\nThis change set moves the filtering to the peer identities instead of\nfiltering the principal sets of the combinations of the endorsement\npolicy.\n\nIt also raises the code coverage from 97% to 99%\n\nChange-Id: I6d2f9f1e735f667fcffe99c3d3b6bfe6a6ed8e98\nSigned-off-by: yacovm <yacovm@il.ibm.com>","distinct":true,"url":"https://api.github.com/repos/hyperledger/fabric/commits/c11956784ba7dcb57c0df5270c8c885c0bfdf8b3"},{"sha":"b95249d92733b225aa92ff1fd512ab3f146eb3e7","author":{"name":"Christopher Ferris","email":"a1516b7ac75c7478ab3bec3c9cfce8f068e4506d@gmail.com"},"message":"Merge \"[FAB-10238] Filter collections on peers, not principals\"","distinct":true,"url":"https://api.github.com/repos/hyperledger/fabric/commits/b95249d92733b225aa92ff1fd512ab3f146eb3e7"}]}
{"actor":{"display_login":"hyperledger-github"}}