#!/usr/bin/env python

"""
  to test with python

cmd1:env keystore=`pwd` ./query.py 
cmd2: env ABAC_CN=1 keystore=`pwd` ./query.py

"""

import os
import ABAC

ctxt = ABAC.Context()

# print "ABAC version %s" % ctxt.version()

keystore=os.environ["keystore"]

ctxt.load_directory(keystore)

stateUID=ABAC.ID("StateU_ID.pem")
stateUID.id_load_privkey_file("StateU_private.pem")
stateU=stateUID.id_keyid()

bobID=ABAC.ID("Bob_ID.pem")
bobID.id_load_privkey_file("Bob_private.pem")
bob=bobID.id_keyid()

markID=ABAC.ID("Mark_ID.pem")
markID.id_load_privkey_file("Mark_private.pem")
mark=markID.id_keyid()

joeID=ABAC.ID("Joe_ID.pem")
joeID.id_load_privkey_file("Joe_private.pem")
joe=joeID.id_keyid()

maryannID=ABAC.ID("Maryann_ID.pem")
maryannID.id_load_privkey_file("Maryann_private.pem")
maryann=maryannID.id_keyid()

janID=ABAC.ID("Jan_ID.pem")
janID.id_load_privkey_file("Jan_private.pem")
jan=janID.id_keyid()

##########################################################################
# role=[keyid:stateU].role:foundingAlumni
# p=[keyid:Bob] 
role = ABAC.Role(stateU,"foundingAlumni")
p = ABAC.Role(bob)
print "\n===good============ stateU.foundingAlumni <- Bob"
out = ctxt.query(role, p)
for c in out[1]:
    print "%s <- %s" % (c.head_string(), c.tail_string())

##########################################################################
# role=[keyid:stateU].role:foundingAlumni
# p=[keyid:Mark] 
role = ABAC.Role(stateU,"foundingAlumni")
p = ABAC.Role(mark)
print "\n===bad============ stateU.foundingAlumni <- Mark"
out = ctxt.query(role, p)
for c in out[1]:
    print "%s <- %s" % (c.head_string(), c.tail_string())

##########################################################################
# role=[keyid:stateU].role:foundingAlumni
# p=[keyid:Joe] 
role = ABAC.Role(stateU,"foundingAlumni")
p = ABAC.Role(joe)
print "\n===bad============ stateU.foundingAlumni <- Joe"
out = ctxt.query(role, p)
for c in out[1]:
    print "%s <- %s" % (c.head_string(), c.tail_string())

##########################################################################
# role=[keyid:stateU].role:foundingAlumni
# p=[keyid:Maryann] 
role = ABAC.Role(stateU,"foundingAlumni")
p = ABAC.Role(maryann)
print "\n===bad============ stateU.foundingAlumni <- Maryann"
out = ctxt.query(role, p)
for c in out[1]:
    print "%s <- %s" % (c.head_string(), c.tail_string())

##########################################################################
# role=[keyid:stateU].role:foundingAlumni
# p=[keyid:Jan] 
role = ABAC.Role(stateU,"foundingAlumni")
p = ABAC.Role(jan)
print "\n===good============ stateU.foundingAlumni <- Jan"
out = ctxt.query(role, p)
for c in out[1]:
    print "%s <- %s" % (c.head_string(), c.tail_string())


##########################################################################
# dump the loaded principals/policies
#
out = ctxt.context_principals()
print "\n...final principal set..."
for x in out[1]:
    print "%s " % x.string()
print "\n"
out = ctxt.context_credentials()
print "\n...final policy attribute set..."
for c in out[1]:
    print "%s <- %s" % (c.head_string(), c.tail_string())
print "\n"