rm -rf creds_dump

pwd=`pwd`

#eloc=/home/mei/Deter/abac/libabac
eloc=$pwd/../../libabac
#keyloc=/home/mei/Deter/abac/examples/file_read_rt2_typed
keyloc=$pwd

alpha=`creddy --keyid --cert $keyloc/Alpha_ID.pem`
bob=`creddy --keyid --cert $keyloc/Bob_ID.pem`
maryann=`creddy --keyid --cert $keyloc/Maryann_ID.pem`
alpha=`creddy --keyid --cert $keyloc/Alpha_ID.pem`

read_fileA="[keyid:$alpha].role:read([urn:'file://fileA'])"
bob_prin="[keyid:$bob]"
maryann_prin="[keyid:$maryann]"

## dump all credentials -- does not seem to work
$eloc/abac_prover_yap  --keystore $keyloc --dump creds_dump

#[keyid:Alpha].role:read([urn:'file://fileA']) <-?- [keyid:Bob] (yes)
echo "===good============ alpha.read(fileA) <- Bob yap "
$eloc/abac_prover_yap  --keystore $keyloc --role "$read_fileA" --principal "$bob_prin"

#[keyid:Alpha].role:read([urn:'file://fileA']) <-?- [keyid:Maryann] (no)
echo "===bad============ alpha.read(fileA) <- Maryann yap "
$eloc/abac_prover_yap  --keystore $keyloc --role "$read_fileA" --principal "$maryann_prin"