rm -rf creds_dump

pwd=`pwd`

#eloc=/home/mei/Deter/abac/libabac
eloc=$pwd/../../libabac
#keyloc=/home/mei/Deter/abac/examples/evaluator_rt1_typed
keyloc=$pwd

isi=`creddy --keyid --cert ISI_ID.pem`
usc=`creddy --keyid --cert USC_ID.pem`
maryann=`creddy --keyid --cert Maryann_ID.pem`
john=`creddy --keyid --cert John_ID.pem`

usc_employee="[keyid:$usc].role:employee"
usc_eval_maryann="[keyid:$usc].role:evaluatorOf([keyid:$maryann])"
isi_manager_maryann="[keyid:$isi].role:managerOf([keyid:$maryann])"
john_prin="[keyid:$john]"

## dump all credentials
$eloc/abac_prover_yap  --keystore $keyloc --dump creds_dump

#[keyid:USC].role:evaluatorOf([keyid:Maryann]) <-?- [keyid:John] yap
echo " "
echo "===good============ USC.evaluatorOf(Maryann) <- John yap "
$eloc/abac_prover_yap  --keystore $keyloc --role "$usc_eval_maryann" --principal "$john_prin"

#[keyid:ISI].role:managerOf([keyid:Maryann]) <-?- [keyid:John] yap
echo " "
echo "===good============ USC.evaluatorOf(Maryann) <- John yap "
$eloc/abac_prover_yap  --keystore $keyloc --role "$isi_manager_maryann" --principal "$john_prin"


#[keyid:USC].role:employee <- [keyid:John] yap "
#USC.employee <-?- John yap
echo " "
echo "===good============  USC.employee <-?- John yap  "
$eloc/abac_prover_yap  --keystore $keyloc --role "$usc_employee" --principal "$john_prin"