Hyperledger Fabric使用用户基本角色类型拒绝错误访问权限来查询fabcar

Question

我正在使用Farbic CA服务器通过Farbic节点js注册客户端，成员，同级。在执行注册过程时，我正在传递User，Memeber，Client的角色类型。在那之后，我要注册创建钱包中的证书，私钥，公钥。我已经设置了光纤网络，并且同行也加入了该渠道，即使我已经安装并启动了fabcar

我的问题是如果我使用角色类型客户端注册并注册用户，则可以查询fabcar链码，但是如果我使用角色类型成员注册用户，则会给我错误。

成员与客户与用户之间有什么区别

channel [channel-all]：创建者证书无效：无法验证身份的OU：身份必须是客户端，对等方，订购者或管理员身份才有效，而不是二者的组合

Configtx.yaml文件，我已经提到了策略类型

- &Org1
    # DefaultOrg defines the organization which is used in the sampleconfig
    # of the fabric.git development environment
    Name: Org1MSP

    # ID to load the MSP definition as
    ID: Org1MSP

    MSPDir: crypto-config/peerOrganizations/org1.avantas.com/msp

    # Policies defines the set of policies at this level of the config tree
    # For organization policies, their canonical path is usually
    #   /Channel/<Application|Orderer>/<OrgName>/<PolicyName>
    Policies:
        Readers:
            Type: Signature
            Rule: "OR('Org1MSP.admin', 'Org1MSP.peer', 'Org1MSP.client', 'Org1MSP.member')"
        Writers:
            Type: Signature
            Rule: "OR('Org1MSP.admin', 'Org1MSP.client', 'Org1MSP.member')"
        Admins:
            Type: Signature
            Rule: "OR('Org1MSP.admin')"

    # leave this flag set to true.
    AnchorPeers:
        # AnchorPeers defines the location of peers which can be used
        # for cross org gossip communication.  Note, this value is only
        # encoded in the genesis block in the Application section context
        - Host: peer0.org1.avantas.com
          Port: 7051

Answer 1

@ fama

在注册管理员时在我的属性下方使用

"type":"user",
"affiliation":"orgName",
"attributes":[{
"name":"admin","value":"true","ecert":true
},