{"record":{"id":"b3b5aee9eec347aa","repo":"hyperledger/fabric","slug":"acls-may-not-be-specified-without-the-required-cap","errorCode":null,"errorMessage":"ACLs may not be specified without the required capability","messagePattern":"ACLs may not be specified without the required capability","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"common/channelconfig/application.go","lineNumber":49,"sourceCode":"type ApplicationConfig struct {\n\tapplicationOrgs map[string]ApplicationOrg\n\tprotos          *ApplicationProtos\n}\n\n// NewApplicationConfig creates config from an Application config group\nfunc NewApplicationConfig(appGroup *cb.ConfigGroup, mspConfig *MSPConfigHandler) (*ApplicationConfig, error) {\n\tac := &ApplicationConfig{\n\t\tapplicationOrgs: make(map[string]ApplicationOrg),\n\t\tprotos:          &ApplicationProtos{},\n\t}\n\n\tif err := DeserializeProtoValuesFromGroup(appGroup, ac.protos); err != nil {\n\t\treturn nil, errors.Wrap(err, \"failed to deserialize values\")\n\t}\n\n\tif !ac.Capabilities().ACLs() {\n\t\tif _, ok := appGroup.Values[ACLsKey]; ok {\n\t\t\treturn nil, errors.New(\"ACLs may not be specified without the required capability\")\n\t\t}\n\t}\n\n\tvar err error\n\tfor orgName, orgGroup := range appGroup.Groups {\n\t\tac.applicationOrgs[orgName], err = NewApplicationOrgConfig(orgName, orgGroup, mspConfig)\n\t\tif err != nil {\n\t\t\treturn nil, err\n\t\t}\n\t}\n\n\treturn ac, nil\n}\n\n// Organizations returns a map of org ID to ApplicationOrg\nfunc (ac *ApplicationConfig) Organizations() map[string]ApplicationOrg {\n\treturn ac.applicationOrgs\n}","sourceCodeStart":31,"sourceCodeEnd":67,"githubUrl":"https://github.com/hyperledger/fabric/blob/2736b63f8fd5932511d56fe68b7039d15977f7f6/common/channelconfig/application.go#L31-L67","documentation":"Channel-config validation guard: the Application group carries ACLs values, but the application capabilities (V1_2 or later, which introduce ACLs) are not enabled, so the config is rejected as inconsistent.","triggerScenarios":"Thrown at common/channelconfig/application.go:49 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Enable an application capability that supports ACLs (e.g. V2_0) in the channel/application capabilities section","Remove the ACLs block from the application config if the capability cannot be raised"],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"2736b63f8fd5932511d56fe68b7039d15977f7f6","analyzedAt":"2026-09-04T08:52:36.465Z","contentChangedAt":"2026-09-04T08:52:36.465Z","schemaVersion":2},"datasetVersion":"2026-09-08T10:18:20.063Z"}