Ledger API, JWT & Client Codegen

Which three things make up a command's change ID?

• Command ID, submission ID and the participant ID
• The acting parties, the user ID and the command ID
• The token's sub, aud and exp claims

An administrator removes canActAs(Carol) from a user whose token is still valid. What happens on the user's next submission as Carol?

• It succeeds until the token expires
• It is refused, because rights are looked up on each request
• It succeeds, because the token was signed when the right existed