準(zhǔn)備工作

啟動nodeos：docker start -i nodeos

啟動keosd:? keosd --http-server-address=127.0.0.1:8889

一赦政、創(chuàng)建賬號

1.為之前創(chuàng)建的default導(dǎo)入密鑰

cleos wallet create_key? ?//使用此命令無需再次將私鑰導(dǎo)入到錢包

返回一個公鑰 EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8

可以用下面的命令查看對應(yīng)公私鑰：

cleos wallet private_keys

password: [[

? ? "EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8",

? ? "5KNgUjPzHxjgkGB5pD6dmXw4J6EfjeB4a9wAUQ6QJgx1pUT6JoP"

? ]

]

為eosio賬戶導(dǎo)入密鑰? ?

? cleos wallet import

? 5KQwrPbwdL6PhXujxW37FSSQZ1JiwsST4cqQzDeyXtP79zkvFD3

?private key: imported private key for: EOS6MRyAjQq8ud7hVNYcfnVPJqcVpscN5So8BhtHuGYqET5GDW5CV

2.查看創(chuàng)建賬號命令的說明

cleos create account

輸出結(jié)果：

ERROR: RequiredError: creator

Create an account, buy ram, stake for bandwidth for the account

Usage: cleos create account [OPTIONS] creator name OwnerKey [ActiveKey]

Positionals:

? creator TEXT? ? ? ? ? ? ? ? The name of the account creating the new account (required)

? name TEXT? ? ? ? ? ? ? ? ? The name of the new account (required)

? OwnerKey TEXT? ? ? ? ? ? ? The owner public key for the new account (required)

? ActiveKey TEXT? ? ? ? ? ? ? The active public key for the new account

Options:

? -h,--help? ? ? ? ? ? ? ? ? Print this help message and exit

? -x,--expiration? ? ? ? ? ? set the time in seconds before a transaction expires, defaults to 30s

? -f,--force-unique? ? ? ? ? force the transaction to be unique. this will consume extra bandwidth and remove any protections against accidently issuing the same transaction multiple times

? -s,--skip-sign? ? ? ? ? ? ? Specify if unlocked wallet keys should be used to sign transaction

? -j,--json? ? ? ? ? ? ? ? ? print result as json

? -d,--dont-broadcast? ? ? ? don't broadcast transaction to the network (just print to stdout)

? --return-packed? ? ? ? ? ? used in conjunction with --dont-broadcast to get the packed transaction

? -r,--ref-block TEXT? ? ? ? set the reference block num or block id used for TAPOS (Transaction as Proof-of-Stake)

? -p,--permission TEXT ...? ? An account and permission level to authorize, as in 'account@permission'

? --max-cpu-usage-ms UINT? ? set an upper limit on the milliseconds of cpu usage budget, for the execution of the transaction (defaults to 0 which means no limit)

? --max-net-usage UINT? ? ? ? set an upper limit on the net usage budget, in bytes, for the transaction (defaults to 0 which means no limit)

分析輸出：

在Positionals結(jié)構(gòu)中包含四個字?jǐn)啵?/p>

creator TEXT（必填）：創(chuàng)建者賬號的名稱。

name TEXT（必填） ：新賬號的名稱哭当。

OwnerKey TEXT（必填）：新賬號的owner權(quán)限的公鑰乒疏。

ActiveKey TEXT（可選）：新賬號的active權(quán)限的公鑰，默認(rèn)與owner權(quán)限的公鑰一致。

在Options結(jié)構(gòu)中有很多可選參數(shù)腥刹，介紹一下比較常用的幾個：

-d：是不廣播到網(wǎng)絡(luò)。

-j：是返回為json格式的數(shù)據(jù)汉买。

-s：是交易數(shù)據(jù)不經(jīng)過簽名衔峰。

-p：是指定簽名的賬號以及權(quán)限，默認(rèn)是active權(quán)限。

-h：是幫助命令垫卤。

3.創(chuàng)建新賬戶xtk

cleos create account eosio xtk EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8

成功返回以下結(jié)果

executed transaction: 12b311852f8ea9392cf6bbc29225f417484b38acfa93700787cae2aa114e884e? 200 bytes? 818 us

#? ? ? ? eosio <= eosio::newaccount? ? ? ? ? ? {"creator":"eosio","name":"xtk","owner":{"threshold":1,"keys":[{"key":"EOS5FkwsbhmPygwgMehCyCb7Dq11V...

warning: transaction executed locally, but may not be confirmed by the network yet? ? ? ? ]

二邻吞、新增權(quán)限

剛創(chuàng)建好的xtk賬戶有兩個原生權(quán)限：owner和active,owner擁有很多功能給的操作權(quán)限，如：轉(zhuǎn)賬葫男、投票、購買ram等等,

現(xiàn)在將投票權(quán)限任命給一個自定義權(quán)限voting崔列，那么單單通過voting權(quán)限所對應(yīng)的私鑰對投票操作進(jìn)行簽名就可以完成投票操作

1梢褐、先看一下xtk的權(quán)限分配

cleos get account xtk

返回如下結(jié)果：

created: 2018-11-21T10:38:29.500

permissions:

owner? ? 1:? ? 1 EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8

active? ? 1:? ? 1 EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8

memory:

quota:? ? ? unlimited? used:? ? ? 2.66 KiB?

net bandwidth:

used:? ? ? ? ? ? ? unlimited

available:? ? ? ? ? unlimited

limit:? ? ? ? ? ? ? unlimited

cpu bandwidth:

used:? ? ? ? ? ? ? unlimited

available:? ? ? ? ? unlimited

limit:? ? ? ? ? ? ? unlimited

分析輸出：

owner閥值為1，權(quán)重也為1赵讯，active閥值為1盈咳，權(quán)重為1，且EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8

同時擁有owner和active兩個權(quán)限

2边翼、新建一對公私鑰控制voting權(quán)限

xiaohulu@xiaohulu-virtual-machine:~/eosio-wallet$ cleos create key --to-console

Private key: 5JetsRMzqYgni4NdVzPecjwyV13TDUEspyuuvkFyZJmErcyttWw

Public key: EOS6q2QkyGqPX1ds8vnGva3N4ebSJR2UNiutyffDSaKJwFP13HtjB

3.給賬號xtk新增voting權(quán)限

由EOS6q2QkyGqPX1ds8vnGva3N4ebSJR2UNiutyffDSaKJwFP13HtjB控制

xiaohulu@xiaohulu-virtual-machine:~/eosio-wallet$ cleos set account permission xtk voting EOS6q2QkyGqPX1ds8vnGva3N4ebSJR2UNiutyffDSaKJwFP13HtjB

返回結(jié)果：

executed transaction: 3c073b48dad78a734f072fd72e92ac0767d9182b36096cfc1095ce10b4bded21? 160 bytes? 509 us

#? ? ? ? eosio <= eosio::updateauth? ? ? ? ? ? {"account":"xtk","permission":"voting","parent":"active","auth":{"threshold":1,"keys":[{"key":"EOS6q...

warning: transaction executed locally, but may not be confirmed by the network yet? .

4.在次查看xtk賬號的權(quán)限分配

cleos get account xtk

返回結(jié)果：

created: 2018-11-21T10:38:29.500

permissions:

owner? ? 1:? ? 1 EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8

active? ? 1:? ? 1 EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8

? voting? ? 1:? ? 1 EOS6q2QkyGqPX1ds8vnGva3N4ebSJR2UNiutyffDSaKJwFP13HtjB

memory:

quota:? ? ? unlimited? used:? ? ? 2.99 KiB?

net bandwidth:

used:? ? ? ? ? ? ? unlimited

available:? ? ? ? ? unlimited

limit:? ? ? ? ? ? ? unlimited

cpu bandwidth:

used:? ? ? ? ? ? ? unlimited

available:? ? ? ? ? unlimited

limit:? ? ? ? ? ? ? unlimited

? ? 可知voting權(quán)限已經(jīng)加入鱼响，并且由EOS6q2QkyGqPX1ds8vnGva3N4ebSJR2UNiutyffDSaKJwFP13HtjB控制

三、新增權(quán)限控制的主體（由多個主體控制一個權(quán)限）

常見的新增權(quán)限控制的主體有兩種：公私鑰對组底、賬號丈积，修改權(quán)限控制的主體，既是讓多個主體控制一個權(quán)限债鸡，實(shí)現(xiàn)多重簽名江滨，

注意：閥值是主體能夠進(jìn)行該操作的根本，只有當(dāng)主體的權(quán)重大于等于閥值才能擁有該權(quán)限進(jìn)行操作

嚴(yán)格按照上面的json數(shù)據(jù)結(jié)構(gòu)設(shè)置

修改的公鑰厌均、賬號必須按照從小到大進(jìn)行排序

所有控制體的權(quán)重的和必須大于等于閥值。

JSON字符創(chuàng)數(shù)據(jù)結(jié)構(gòu)

{

? "threshold":? ? ? <INTEGER [1-2^32): the threshold that must be met to satisfy this authority>,

? "keys": [? ? ? ? <keys must be alpha-numerically sorted by their string representations and unique>

...

{

? "key":? ? ? ? <STRING: EOS.IO compatible Public Key>,

? "weight":? ? <INTEGER [1-2^16): a signature from this key contributes this to satisfying the threshold>

}

...

? ],

? "accounts": [? ? <accounts must be alpha-numerically sorted by their permission (actor, then permission) and unique>

...

{

? "permission": {

"actor":? ? ? <STRING: account name of the delegated signer>,

"permission": <STRING: permission level on the account that must be satisfied>,

? },

? "weight":? ? <INTEGER [1-2^16): satisfying the delegation contributes this to satisfying the threshold>

}

...

? ],

? "waits": [? ? ? ? <waits must be sorted by wait_sec, largest first, and be unique>

...

{

? "wait_sec":? <INTEGER [1-2^32): seconds of delay which qualifies as passing this wait>

? "weight":? ? <INTEGER [1-2^16): satisfying the delay contributes this to satisfying the threshold>

}

...

? ]

}

2、 新增權(quán)限控制的主體：公私鑰對

xiaohulu@xiaohulu-virtual-machine:~/eosio-wallet$ cleos create key --to-console

Private key: 5J8ZhubxPZmoPkuo3XGtAsvgmtqrpnTCGHGPHES91FfPgdATGM5

Public key: EOS8XX11uRAjWrAbt6V5AA2xLQvz4bNcDdwTdMPjFPA31n2GRfV3x

設(shè)置閥值threshold巴帮、keys字段

cleos set account permission xtk active '{"threshold": 1, "keys": [{"key":"EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8","weight": 1},{"key":"EOS8XX11uRAjWrAbt6V5AA2xLQvz4bNcDdwTdMPjFPA31n2GRfV3x","weight": 1}]}'

權(quán)限的主體需要按照公鑰進(jìn)行排序

再次執(zhí)行cleos get account xtk 得到以下結(jié)果

xiaohulu@xiaohulu-virtual-machine:~/eosio-wallet$ cleos get account xtk

created: 2018-11-21T10:38:29.500

permissions:

owner? ? 1:? ? 1 EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8

active? ? 1:? ? 1 EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8, 1 EOS8XX11uRAjWrAbt6V5AA2xLQvz4bNcDdwTdMPjFPA31n2GRfV3x

? voting? ? 1:? ? 1 EOS7qnszhS19DtgnPQRPuFmxVNmjzAPD9A3Zh3MSVS6ZN9KLa5Fa9

memory:

quota:? ? ? unlimited? used:? ? 3.039 KiB?

net bandwidth:

used:? ? ? ? ? ? ? unlimited

available:? ? ? ? ? unlimited

limit:? ? ? ? ? ? ? unlimited

cpu bandwidth:

used:? ? ? ? ? ? ? unlimited

available:? ? ? ? ? unlimited

limit:? ? ? ? ? ? ? unlimited

可知鱼喉，active權(quán)限新增了控制主體，由"EOS8XX11uRAjWrAbt6V5AA2xLQvz4bNcDdwTdMPjFPA31n2GRfV3x"控制模她，

兩個active都可以單獨(dú)使用active權(quán)限稻艰，后面更改閥值，讓兩個公鑰合作完成active侈净，達(dá)到多重簽名的目的

四连锯、修改閥值

修改xtk賬號的active權(quán)限閥值為2，這樣因?yàn)閮蓚€公鑰的權(quán)限都是1用狱，所以要想使用active權(quán)限运怖，需要兩個合作

實(shí)現(xiàn)多重簽名的功能

1、先測試xtk的active權(quán)限的"EOS8XX11uRAjWrAbt6V5AA2xLQvz4bNcDdwTdMPjFPA31n2GRfV3x"是否擁有active功能

cleos create account xtk aaa? "EOS8XX11uRAjWrAbt6V5AA2xLQvz4bNcDdwTdMPjFPA31n2GRfV3x" -p xtk@active

executed transaction: 4a3fa2e1a1f8e4c812369d104c2907f033f4ac0cc0cc5afcc206151c1cc25600? 200 bytes? 578 us

#? ? ? ? eosio <= eosio::newaccount? ? ? ? ? ? {"creator":"xtk","name":"aaa","owner":{"threshold":1,"keys":[{"key":"EOS8XX11uRAjWrAbt6V5AA2xLQvz4bN...

warning: transaction executed locally, but may not be confirmed by the network yet? ? ? ? ]

顯示結(jié)果證明夏伊，主體能夠使用active權(quán)限的功能

2摇展、修改xtk賬號active權(quán)限的閥值為2

cleos set account permission xtk? active '{"threshold":2,"keys":[{"key":"EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8","weight":1},{"key":"EOS8XX11uRAjWrAbt6V5AA2xLQvz4bNcDdwTdMPjFPA31n2GRfV3x","weight":1}]}'

設(shè)置完成之后，再次執(zhí)行cleos get account xtk

結(jié)果如下：

xiaohulu@xiaohulu-virtual-machine:~/eosio-wallet$ cleos get account xtk

created: 2018-11-21T10:38:29.500

permissions:

owner? ? 1:? ? 1 EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8

active? ? 2:? ? 1 EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8, 1 EOS8XX11uRAjWrAbt6V5AA2xLQvz4bNcDdwTdMPjFPA31n2GRfV3x

? voting? ? 1:? ? 1 EOS6q2QkyGqPX1ds8vnGva3N4ebSJR2UNiutyffDSaKJwFP13HtjB

memory:

quota:? ? ? unlimited? used:? ? 3.039 KiB?

net bandwidth:

used:? ? ? ? ? ? ? unlimited

available:? ? ? ? ? unlimited

limit:? ? ? ? ? ? ? unlimited

cpu bandwidth:

used:? ? ? ? ? ? ? unlimited

available:? ? ? ? ? unlimited

limit:? ? ? ? ? ? ? unlimited

可以看到溺忧，active的閥值已經(jīng)修改為2

現(xiàn)在咏连，任何主體都不能單獨(dú)使用active權(quán)限的功能

cleos create account xtk t2 EOS8XX11uRAjWrAbt6V5AA2xLQvz4bNcDdwTdMPjFPA31n2GRfV3x -p xtk@active

執(zhí)行結(jié)果：3090003：提供的密鑰盯孙、權(quán)限和延遲不滿足該權(quán)限的閥值，請確保錢包內(nèi)有相關(guān)的私鑰祟滴。

Error 3090003: Provided keys, permissions, and delays do not satisfy declared authorizations

Ensure that you have the related private keys inside your wallet and your wallet is unlocked.

使用active權(quán)限的方法：

·兩個主體加起來才能使用active 權(quán)限的功能（兩個主體的權(quán)限加起來為2）

·使用-p xtk@owner簽名

·修改主體權(quán)重大于等于active權(quán)重的閥值

五振惰、修改權(quán)重

修改EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8主體的權(quán)重為2

cleos set account permission xtk active '{"threshold": 2, "keys": [{"key":"EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8","weight": 2},{"key":"EOS8XX11uRAjWrAbt6V5AA2xLQvz4bNcDdwTdMPjFPA31n2GRfV3x","weight": 1}]}' -p xtk@owner

執(zhí)行成功：

executed transaction: 4abbcf8722d9b00217aed66ac685cb4b107db2160a344ca6c54e92fcb18975bb? 200 bytes? 347 us

#? ? ? ? eosio <= eosio::updateauth? ? ? ? ? ? {"account":"xtk","permission":"active","parent":"owner","auth":{"threshold":2,"keys":[{"key":"EOS5Fk...

warning: transaction executed locally, but may not be confirmed by the network yet? ? ? ? ]

此時，active閥值為2垄懂，主體權(quán)限EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8已經(jīng)修改為2骑晶，

"EOS8XX11uRAjWrAbt6V5AA2xLQvz4bNcDdwTdMPjFPA31n2GRfV3x"權(quán)限為1

六、多重簽名

何為多重簽名呢草慧，就是多個私鑰一起對交易進(jìn)行簽名

重新修改active的閥值為3

cleos set account permission xtk active '{"threshold": 3, "keys": [{"key":"EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8","weight": 2},{"key":"EOS8XX11uRAjWrAbt6V5AA2xLQvz4bNcDdwTdMPjFPA31n2GRfV3x","weight": 1}], "accounts": [{"permission":{"actor":"tester", "permission":"owner"}, "weight":1}]}'

執(zhí)行之后桶蛔，再次執(zhí)行cleos get account xtk

xiaohulu@xiaohulu-virtual-machine:~/eosio-wallet$ cleos get account xtk

created: 2018-11-21T10:38:29.500

permissions:

owner? ? 1:? ? 1 EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8

active? ? 3:? ? 2 EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8, 1 EOS8XX11uRAjWrAbt6V5AA2xLQvz4bNcDdwTdMPjFPA31n2GRfV3x, 1 tester@owner

? voting? ? 1:? ? 1 EOS6q2QkyGqPX1ds8vnGva3N4ebSJR2UNiutyffDSaKJwFP13HtjB

memory:

quota:? ? ? unlimited? used:? ? ? 3.07 KiB?

net bandwidth:

used:? ? ? ? ? ? ? unlimited

available:? ? ? ? ? unlimited

limit:? ? ? ? ? ? ? unlimited

cpu bandwidth:

used:? ? ? ? ? ? ? unlimited

available:? ? ? ? ? unlimited

limit:? ? ? ? ? ? ? unlimited

可知對active權(quán)限已經(jīng)修改為3

現(xiàn)在，EOS5FkwsbhmPygwgMehCyCb7Dq11VCJwm8Ue344GNvBxH9Byfp5c8與

EOS8XX11uRAjWrAbt6V5AA2xLQvz4bNcDdwTdMPjFPA31n2GRfV3x單獨(dú)任意一個都不能時限active權(quán)限

只有將EOS8XX11uRAjWrAbt6V5AA2xLQvz4bNcDdwTdMPjFPA31n2GRfV3x私鑰導(dǎo)入default錢包實(shí)現(xiàn)多重簽名

xiaohulu@xiaohulu-virtual-machine:~/eosio-wallet$ cleos wallet import --private-key 5J8ZhubxPZmoPkuo3XGtAsvgmtqrpnTCGHGPHES91FfPgdATGM5

imported private key for: EOS8XX11uRAjWrAbt6V5AA2xLQvz4bNcDdwTdMPjFPA31n2GRfV3x

xiaohulu@xiaohulu-virtual-machine:~/eosio-wallet$ cleos create account xtk bbb EOS8XX11uRAjWrAbt6V5AA2xLQvz4bNcDdwTdMPjFPA31n2GRfV3x -p xtk@active

executed transaction: f6e93eb8abb9d25e34a4929139902336b614631b3b8de9322f3b189af98ee432? 208 bytes? 273 us

#? ? ? ? eosio <= eosio::newaccount? ? ? ? ? ? {"creator":"xtk","name":"bbb","owner":{"threshold":1,"keys":[{"key":"EOS8XX11uRAjWrAbt6V5AA2xLQvz4bN...

warning: transaction executed locally, but may not be confirmed by the network yet? ? ? ? ]

總結(jié)：?

對于每一個權(quán)限都會有一個閥值漫谷，每一個公私鑰對都有一個權(quán)重仔雷，只有達(dá)到閥值得公私鑰對，才有資格執(zhí)行此權(quán)限舔示。后續(xù)賬戶可以修改權(quán)限的閥值碟婆，或者為每個公私鑰對分配不同的權(quán)重，以此執(zhí)行權(quán)限惕稻。