| | 3 | == Intro == |
| | 4 | |
| | 5 | Crudge is a browser for credentials implementing the RT0 logic used by ABAC. The credentials are visualized as a directed graph where principals and roles/attributes are nodes in the graph and credentials are edges. If a principal has an attribute (can act in a role) there is a path through the directed graph from principal to attribuet (role). |
| | 6 | |
| | 7 | Crudge uses the same visualizations for roles that [http://groups.geni.net/geni/wiki/TIEDABACModel our description of ABAC] for [http://groups.geni.net/geni/wiki/TIED TIED] uses. [http://groups.geni.net/geni/wiki/TIEDABACModel That description] is a good starting point the visualiations and ABAC. |
| | 8 | |
| | 9 | Crudge allows a user to visualize an ABAC proof or explore a policy. One can make queries against the policy and save all or parts of the policy. It can be used to create credentials and principals, that interoperate with the rest of [wiki:WikiStart ABAC]. It can be used as a simple management interface for small systems using ABAC. |
