| 32 | |
| 33 | These details are summarized below. |
| 34 | |
| 35 | [[Image(crudge_first_annotated_test.png)]] |
| 36 | |
| 37 | |
| 38 | === Running A Query === |
| 39 | |
| 40 | To demonstrate running a query, load an example set of credentials from http://abac.deterlab.net/examples/rockets_intersection.zip . Select "Open a URL" from the File menu and type http://abac.deterlab.net/examples/rockets_intersection.zip into the dialog box and hit return. |
| 41 | |
| 42 | A set of credentials will appear layed out roughly as a tree. You will probably need to move the boxes around a bit to see the structure. You can move a vertex by putting the pointer on it, holding doen the left mouse button and dragging the box. You can pan around the space by putting the pointer on the background, holding the left button and dragging the whole frame. With a little moving you should see something like the image below. |
| 43 | |
| 44 | [[Image(batman.png)]] |
| 45 | |
| 46 | If you enter Acme.buy_rockets in the leftmost query box and Coyote in the other and hit enter, you will see the following. |
| 47 | |
| 48 | [[Image(coyote_query.png)]] |
| 49 | |
| 50 | The query pane shows the similing face icon and the part of the graph containing the path from Coyote to Acme.buy_rockets. The credential graph encodes the idea that to buy rockets from Acme, a principal must be a preferred customer of Acme (the Acme.preferred_customer role) and be a !WarnerBros character (the !WarnerBros.character role). The Coyote meets both conditions, but Batman meets only one in this example. |
| 51 | |
| 52 | To see that Batman cannot buy rockets enter Acme.buy_rockets in the leftmost query box and Coyote in the other and hit enter. You will see an empty query with the red "X". |
| 53 | |
| 54 | [[Image(batman_query.png)]] |