source: examples/alumni_rt1_typed/rr @ e88c95b

mei_rt2mei_rt2_fix_1meiyap-rt1rt2
Last change on this file since e88c95b was e88c95b, checked in by Mei <mei@…>, 12 years ago

1) switch the order of terms within the rule clause.

carl said more specific should be at the earlier part of rule so
it won't backtrack to death.

2) unset some debug flag in creddy
  • Property mode set to 100755
File size: 1.1 KB
Line 
1rm -rf creds_dump
2
3eloc=/home/mei/Deter/abac/libabac
4keyloc=/home/mei/Deter/abac/examples/alumni_rt1_typed
5
6stateU=`creddy --keyid --cert $keyloc/StateU_ID.pem`
7bob=`creddy --keyid --cert $keyloc/Bob_ID.pem`
8maryann=`creddy --keyid --cert $keyloc/Maryann_ID.pem`
9joe=`creddy --keyid --cert $keyloc/Joe_ID.pem`
10
11stateU_foundingAlumni="[keyid:$stateU].role:foundingAlumni"
12bob_prin="[keyid:$bob]"
13maryann_prin="[keyid:$maryann]"
14joe_prin="[keyid:$joe]"
15
16# [keyid:stateU].role:foundingAlumni <-?- [keyid:Bob] (no)
17# [keyid:stateU].role:foundingAlumni <-?- [keyid:Maryann] (yes)
18
19## dump all credentials
20$eloc/abac_prover_yap  --keystore $keyloc --dump creds_dump
21
22# [keyid:stateU].role:foundingAlumni <-?- [keyid:Bob] (yes)
23echo "===bad============ stateU.foundingAlumni <- Bob yap "
24$eloc/abac_prover_yap  --keystore $keyloc --role "$stateU_foundingAlumni" --principal "$bob_prin"
25
26# [keyid:stateU].role:foundingAlumni <-?- [keyid:Maryann] (yes)
27# asking, isMember(pMaryann,role(pStateU,foundingAlumni),C).
28#echo "===good============ stateU.foundingAlumni <- Maryann yap "
29$eloc/abac_prover_yap  --keystore $keyloc --role "$stateU_foundingAlumni" --principal "$maryann_prin"
30
31
Note: See TracBrowser for help on using the repository browser.