mei_rt2mei_rt2_fix_1meiyap-rt1rt2
Last change
on this file since 9502c50 was
9502c50,
checked in by Mei <mei@…>, 12 years ago
|
1) rename examples' rr to run_query
2) updated some doc
3) add decode to creddy --roles and creddy --display --show so it will
show more useful attribute rule string
4) stub in the python script in one of the example directory
|
-
Property mode set to
100755
|
File size:
1.3 KB
|
Rev | Line | |
---|
[718ad924] | 1 | |
---|
[9502c50] | 2 | # experiment_create_rt0_typed |
---|
[da5afdf] | 3 | |
---|
[c469edf] | 4 | pwd=`pwd` |
---|
| 5 | |
---|
| 6 | eloc=$pwd/../../libabac |
---|
| 7 | keyloc=$pwd |
---|
[718ad924] | 8 | |
---|
| 9 | acme=`creddy --keyid --cert $keyloc/Acme_ID.pem` |
---|
| 10 | alice=`creddy --keyid --cert $keyloc/Alice_ID.pem` |
---|
| 11 | bob=`creddy --keyid --cert $keyloc/Bob_ID.pem` |
---|
| 12 | globotron=`creddy --keyid --cert $keyloc/Globotron_ID.pem` |
---|
| 13 | |
---|
[da5afdf] | 14 | glob_admin="[keyid:$globotron].role:admin" |
---|
| 15 | alice_prin="[keyid:$alice]" |
---|
| 16 | bob_prin="[keyid:$bob]" |
---|
| 17 | experiment_create="[keyid:$acme].role:experiment_create" |
---|
| 18 | |
---|
| 19 | ## dump all credentials |
---|
| 20 | $eloc/abac_prover_yap --keystore $keyloc --dump creds_dump |
---|
| 21 | |
---|
[9502c50] | 22 | #[keyid:Globotron].role:admin <-?- [keyid:Alice] |
---|
[718ad924] | 23 | #isMember(pAlice, role(pGlobotron,admin), C). |
---|
| 24 | echo " " |
---|
[9502c50] | 25 | echo "===good=============== Globotron.admin <- Alice" |
---|
[da5afdf] | 26 | $eloc/abac_prover_yap --keystore $keyloc \ |
---|
| 27 | --role "$glob_admin" --principal "$alice_prin" |
---|
[718ad924] | 28 | |
---|
[9502c50] | 29 | #[keyid:Globotron].role:admin <-?- [keyid:Bob] |
---|
[718ad924] | 30 | #isMember(pBob, role(pGlobotron,admin), C). |
---|
| 31 | echo " " |
---|
[9502c50] | 32 | echo "===bad=============== Globotron.admin <- Bob" |
---|
[da5afdf] | 33 | $eloc/abac_prover_yap --keystore $keyloc \ |
---|
| 34 | --role "$glob_admin" --principal "$bob_prin" |
---|
[718ad924] | 35 | |
---|
[9502c50] | 36 | #[keyid:Acme].role:experiment_create <-?- [keyid:Bob] |
---|
[718ad924] | 37 | #isMember(pBob, role(pAcme,experiment_create), C). |
---|
| 38 | echo " " |
---|
[9502c50] | 39 | echo "===good=============== Acme.experiment_create <- Bob" |
---|
[da5afdf] | 40 | $eloc/abac_prover_yap --keystore $keyloc \ |
---|
| 41 | --role "$experiment_create" --principal "$bob_prin" |
---|
[718ad924] | 42 | |
---|
| 43 | |
---|
Note: See
TracBrowser
for help on using the repository browser.