[718ad924] | 1 | |
---|
[9502c50] | 2 | # experiment_create_rt0_typed |
---|
[da5afdf] | 3 | |
---|
[c469edf] | 4 | pwd=`pwd` |
---|
[08b8da7] | 5 | eloc=`which abac_prover_yap | sed 's/\/abac_prover_yap//'` |
---|
| 6 | if [ "$eloc" = "" ]; then |
---|
| 7 | echo "ERROR: abac_prover_yap is not in the search path!!!" |
---|
| 8 | exit 1 |
---|
| 9 | fi |
---|
[c469edf] | 10 | keyloc=$pwd |
---|
[718ad924] | 11 | |
---|
| 12 | acme=`creddy --keyid --cert $keyloc/Acme_ID.pem` |
---|
| 13 | alice=`creddy --keyid --cert $keyloc/Alice_ID.pem` |
---|
| 14 | bob=`creddy --keyid --cert $keyloc/Bob_ID.pem` |
---|
| 15 | globotron=`creddy --keyid --cert $keyloc/Globotron_ID.pem` |
---|
| 16 | |
---|
[da5afdf] | 17 | glob_admin="[keyid:$globotron].role:admin" |
---|
| 18 | alice_prin="[keyid:$alice]" |
---|
| 19 | bob_prin="[keyid:$bob]" |
---|
| 20 | experiment_create="[keyid:$acme].role:experiment_create" |
---|
| 21 | |
---|
| 22 | ## dump all credentials |
---|
| 23 | $eloc/abac_prover_yap --keystore $keyloc --dump creds_dump |
---|
[2e9455f] | 24 | #$eloc/abac_prover_yap --keystore $keyloc --dbdump |
---|
[da5afdf] | 25 | |
---|
[9502c50] | 26 | #[keyid:Globotron].role:admin <-?- [keyid:Alice] |
---|
[718ad924] | 27 | #isMember(pAlice, role(pGlobotron,admin), C). |
---|
| 28 | echo " " |
---|
[9502c50] | 29 | echo "===good=============== Globotron.admin <- Alice" |
---|
[da5afdf] | 30 | $eloc/abac_prover_yap --keystore $keyloc \ |
---|
| 31 | --role "$glob_admin" --principal "$alice_prin" |
---|
[718ad924] | 32 | |
---|
[9502c50] | 33 | #[keyid:Globotron].role:admin <-?- [keyid:Bob] |
---|
[718ad924] | 34 | #isMember(pBob, role(pGlobotron,admin), C). |
---|
| 35 | echo " " |
---|
[9502c50] | 36 | echo "===bad=============== Globotron.admin <- Bob" |
---|
[da5afdf] | 37 | $eloc/abac_prover_yap --keystore $keyloc \ |
---|
| 38 | --role "$glob_admin" --principal "$bob_prin" |
---|
[718ad924] | 39 | |
---|
[9502c50] | 40 | #[keyid:Acme].role:experiment_create <-?- [keyid:Bob] |
---|
[718ad924] | 41 | #isMember(pBob, role(pAcme,experiment_create), C). |
---|
| 42 | echo " " |
---|
[9502c50] | 43 | echo "===good=============== Acme.experiment_create <- Bob" |
---|
[da5afdf] | 44 | $eloc/abac_prover_yap --keystore $keyloc \ |
---|
| 45 | --role "$experiment_create" --principal "$bob_prin" |
---|
[718ad924] | 46 | |
---|
| 47 | |
---|