abac0-leakabac0-mei
Last change
on this file since 4f79997 was
4f79997,
checked in by Mei <mei@…>, 11 years ago
|
1) add a new scaling test -haystack/ralphs
2) tweak some libabac code here and there
|
-
Property mode set to
100755
|
File size:
1.3 KB
|
Rev | Line | |
---|
[be6cb41] | 1 | # |
---|
| 2 | #Acme runs a testbed. They've delegated the authority to create |
---|
| 3 | #experiments to all their partners. The Globotron company is one such |
---|
| 4 | #partner. |
---|
| 5 | # |
---|
| 6 | # Acme.experiment_create <- Acme.partner.experiment_create |
---|
| 7 | # |
---|
| 8 | #Globotron has delegated the authority to anyone an admin thinks is a |
---|
| 9 | #'power user'. |
---|
| 10 | # |
---|
| 11 | # Globotron.experiment_create <- Globotron.admin.power_user |
---|
| 12 | # |
---|
[4f79997] | 13 | #and, Globotron is a partner of Acme |
---|
| 14 | # |
---|
| 15 | # Acme.partner <- Globotron |
---|
| 16 | # |
---|
[be6cb41] | 17 | #Alice is an admin, and her friend Bob is a power user: |
---|
| 18 | # |
---|
| 19 | # Globotron.admin <- Alice |
---|
| 20 | # Alice.power_user <- Bob |
---|
| 21 | # |
---|
| 22 | #From these credentials, it is possible to show that |
---|
| 23 | # Acme.experiment_create <- Bob. |
---|
| 24 | # |
---|
| 25 | #In query.py, it checks if Alice is a admin of Globotron which is true; |
---|
| 26 | #and if Bob is an admin of Globotron which is not true; and also show |
---|
[4f79997] | 27 | #that Bob can create experiment at Acme |
---|
[be6cb41] | 28 | # |
---|
| 29 | # experiment_create_rt0 |
---|
| 30 | |
---|
| 31 | # Credential 1 |
---|
| 32 | #[keyid:Acme].role:experiment_create |
---|
| 33 | # <- [keyid:Acme].role:partner.role:experiment_create |
---|
| 34 | |
---|
| 35 | # Credential 2 |
---|
| 36 | #[keyid:Acme].role:partner <- [keyid:Globotron] |
---|
| 37 | |
---|
| 38 | # Credential 3 |
---|
| 39 | #[keyid:Globotron].role:expriment_create |
---|
| 40 | <- [keyid:Globotron].role:admin.role:power_user |
---|
| 41 | |
---|
| 42 | # Credential 4 |
---|
| 43 | #[keyid:Globotron].role:admin <- [keyid:Alice] |
---|
| 44 | |
---|
| 45 | # Credential 5 |
---|
| 46 | #[keyid:Alice].role:power_user <- [keyid:Bob] |
---|
| 47 | |
---|
Note: See
TracBrowser
for help on using the repository browser.