abac0-leakabac0-meimei-idmei-rt0-nmei_rt0tvf-new-xml
Last change
on this file since be6cb41 was
be6cb41,
checked in by Mei <mei@…>, 12 years ago
|
1) forgot to add the new files
|
-
Property mode set to
100755
|
File size:
1.2 KB
|
Line | |
---|
1 | # |
---|
2 | #Acme runs a testbed. They've delegated the authority to create |
---|
3 | #experiments to all their partners. The Globotron company is one such |
---|
4 | #partner. |
---|
5 | # |
---|
6 | # Acme.experiment_create <- Acme.partner.experiment_create |
---|
7 | # |
---|
8 | #Globotron has delegated the authority to anyone an admin thinks is a |
---|
9 | #'power user'. |
---|
10 | # |
---|
11 | # Globotron.experiment_create <- Globotron.admin.power_user |
---|
12 | # |
---|
13 | #Alice is an admin, and her friend Bob is a power user: |
---|
14 | # |
---|
15 | # Globotron.admin <- Alice |
---|
16 | # Alice.power_user <- Bob |
---|
17 | # |
---|
18 | #From these credentials, it is possible to show that |
---|
19 | # Acme.experiment_create <- Bob. |
---|
20 | # |
---|
21 | #In query.py, it checks if Alice is a admin of Globotron which is true; |
---|
22 | #and if Bob is an admin of Globotron which is not true; and also show |
---|
23 | # that Bob can create experiment at Acme |
---|
24 | # |
---|
25 | # experiment_create_rt0 |
---|
26 | |
---|
27 | # Credential 1 |
---|
28 | #[keyid:Acme].role:experiment_create |
---|
29 | # <- [keyid:Acme].role:partner.role:experiment_create |
---|
30 | |
---|
31 | # Credential 2 |
---|
32 | #[keyid:Acme].role:partner <- [keyid:Globotron] |
---|
33 | |
---|
34 | # Credential 3 |
---|
35 | #[keyid:Globotron].role:expriment_create |
---|
36 | <- [keyid:Globotron].role:admin.role:power_user |
---|
37 | |
---|
38 | # Credential 4 |
---|
39 | #[keyid:Globotron].role:admin <- [keyid:Alice] |
---|
40 | |
---|
41 | # Credential 5 |
---|
42 | #[keyid:Alice].role:power_user <- [keyid:Bob] |
---|
43 | |
---|
Note: See
TracBrowser
for help on using the repository browser.