rm -rf creds_dump

pwd=`pwd`

#eloc=/home/mei/Deter/abac/libabac
eloc=$pwd/../../libabac
#keyloc=/home/mei/Deter/abac/examples/acme_rockets_intersection_rt0_typed
keyloc=$pwd

acme=`creddy --keyid --cert $keyloc/Acme_ID.pem`
batman=`creddy --keyid --cert $keyloc/Batman_ID.pem`
coyote=`creddy --keyid --cert $keyloc/Coyote_ID.pem`

buy_rockets="[keyid:$acme].role:buy_rockets"
coyote_prin="[keyid:$coyote]"
batman_prin="[keyid:$batman]"
bad_buy_rockets="[keyid:$acme].role:bad_buy_rockets"
bad_buy_rockets2="[keyid:99$acme].role:buy_rockets"

## dump all credentials
$eloc/abac_prover_yap  --keystore $keyloc --dump creds_dump

#[keyid:Acme].role:buy_rockets <-?- [keyid:Coyote] yap
#isMember(pCoyote, role(pAcme,buy_rockets), C).
echo "  "
echo "===good============ Acme.buy_rockets <- Coyote yap "
$eloc/abac_prover_yap  --keystore $keyloc \
              --role "$buy_rockets" --principal "$coyote_prin"

#[keyid:Acme].role:bad_buy_rockets <-?- [keyid:Coyote] yap
#isMember(pCoyote, role(pAcme,bad_buy_rockets), C).
echo "  "
echo "===bad============ Acme.bad_buy_rockets <- Coyote yap"
$eloc/abac_prover_yap  --keystore $keyloc \
              --role "$bad_buy_rockets" --principal "$coyote_prin"

#[keyid:Acme99].role:buy_rockets <-?- [keyid:Coyote] yap
#isMember(pCoyote99, role(99pAcme,buy_rockets), C).
echo "  "
echo "===bad============ 99Acme.buy_rockets <- Coyote yap"
$eloc/abac_prover_yap  --keystore $keyloc \
              --role "$bad_buy_rockets2" --principal "$coyote_prin"

#Acme.buy_rockets <-?- Batman yap
#[keyid:Acme].role:buy_rockets <-?- [keyid:Batman] yap
#isMember(pBatman, role(pAcme,buy_rockets), C).
echo "  "
echo "===bad=============== Acme.buy_rockets <- Batman yap"
$eloc/abac_prover_yap  --keystore $keyloc \
              --role "$buy_rockets" --principal "$batman_prin"