I am very new to Hyperledger composer, so maybe I understand something wrong.
My situation:
I have a network with several cards. Lets say I have (admin@basic-network) and (user1@basic-network). Now I have created a composer-rest-server with google authentication via this tutorial: https://hyperledger.github.io/composer/latest/tutorials/google_oauth2_rest
Everything works fine but I have 2 questions:
1) Right now everyone can login with his google Account and gets the access key. Is this supposed to be? Because actually it's a private blockchain, and I thought that a Administrator needs to define who can join the network.
2) With the wallet, I need to import a card which is necessary to create api calls. But let's say there are 10x Users who access the Api. When I import my card, everyone else who is accessing the api can see the imported card with GET "/wallet" and can also use it for his Api calls?
I think that I don't see something or that I'm not thinking correct at some point. Hopefully you can help me here.
Thank you!