Any node can create a stream?

+1 vote
I have three nodes setup, and in my params.dat I've set anyone-can-create=false. However, on node-02 and node-03 i can issue "create stream MYSTREAM false" ... I expected to see a permission error.  I can confirm that the new stream is in the blockchain because liststreams reflects the stream on on the other nodes.

I do have anyone-can-send=true set .. Does this override the create permission?
asked Nov 30, 2017 by erudisill
When you connect Node 2 and 3 to Node 1 for the first time, it asks you to grant permission. At that time which permissions do you grant ?

If you have granted "SEND, RECEIVE, CREATE" then maybe that is causing problem ?
When I connect multichaind to another node, it doesn't ask for any kind of permission. I have the permissions set so anyone can send/receive/mine ... I'm just trying to lock down the creation of streams and publication of items.

1 Answer

0 votes

Try running listpermissions create to see which addresses have been granted the ability to create a stream.

answered Dec 1, 2017 by MultiChain
Hmm... `listpermissions create` now only shows one address - the first node.  But on node-03 I can issue `create stream TEST03 true` with no problem.

Nodes 01, 02, and 03, exist as EC2 instances in AWS. For testing, I launched a small Docker node on my local PC, attached a multichaind node to the chain, and brought up the cli. Within the docker node (locally) I cannot create a stream, it denies saying that there are not enough permissions.

So at this point, I'm confused as to why nodes 02 and 03 can create (even though they're not listed in the permissions set) but my local node can not.
Still assuming that anyone-can-create=false, you can use listaddresses to see which address are in each of these node's wallets, and compare that against the output of "listpermissions create". If a node is able to create a stream even though it does not own any address that has the create permission, then this sounds like a bug and we'd need to get some more details from you to look into it further. But we'd be quite surprised.