# alice_rt1_typed

pwd=`pwd`
eloc=`which abac_prover_yap | sed 's/\/abac_prover_yap//'`
if [ "$eloc" = "" ]; then
  echo "ERROR: abac_prover_yap is not in the search path!!!"
  exit 1
fi
keyloc=$pwd

alice=`creddy --keyid --cert Alice_ID.pem`
party=`creddy --keyid --cert Party_ID.pem`
tea=`creddy --keyid --cert Tea_ID.pem`
hatter=`creddy --keyid --cert Hatter_ID.pem`
marchhare=`creddy --keyid --cert MarchHare_ID.pem`
dormouse=`creddy --keyid --cert Dormouse_ID.pem`

party_guests="[keyid:$party].role:guests"
dormouse_prin="[keyid:$dormouse]"
hatter_prin="[keyid:$hatter]"

## dump all credentials
$eloc/abac_prover_yap  --keystore $keyloc --dump creds_dump

#[keyid:Party].role:guests <-?- [keyid:dormouse]
echo "  "
echo "===good============ Party.guests <- dourmouse"
$eloc/abac_prover_yap  --keystore $keyloc --role "$party_guests" --principal "$dormouse_prin"

#[keyid:Party].role:guests <-?- [keyid:hatter]
echo "  "
echo "===bad============ Party.guests <- hatter"
$eloc/abac_prover_yap  --keystore $keyloc --role "$party_guests" --principal "$hatter_prin"