Changes between Version 26 and Version 27 of TIEDABACDemo

Timestamp:

07/13/09 18:06:28 (15 years ago)

Author:

faber@isi.edu

Comment:

--

TIEDABACDemo

@@ -111 +111 @@
 [[Image(example14.png)]]
 
-Of particular interest is the dashed blue line connection the '''(ACM.gamerep).CTFcontestant''' attribute and the '''USC.CTFcontestant''' attribute boxes.  Unlike the other arrows in the graph, this connection is deduced from credentials rather than being specifically represented by one.  The text overlaying the snapshow shows the connection.
-
-[[Image(example15.png)]]
+Of particular interest is the dashed blue line connection the '''(ACM.gamerep).CTFcontestant''' attribute and the '''USC.CTFcontestant''' attribute boxes.  Unlike the other arrows in the graph, this connection is deduced from credentials rather than being specifically represented by one.  The text overlaying the snapshow shows the connection between the rules and credentials as well as the implied edge.
+
+Again, a principal has all the attributes it can reach via edges (implied or explicit) in the graph.
+
+This direct nomination is the simplest way to had out credenitals.
+
+=== More Complex Delegations ===
+
+All the delegation mechanisms discussed so far work within the delegated principals.  So one can directly delegate directly by 
+
+[[Image(example7.png)]]
+
+Which allows all students to participate
+
+Or indirectly by
+
+[[Image(example8.png)]]
+
+[[Image(example9.png)]]
+
+Which allows Mike, an ACM officer to select participants.
+
+== Overall ==
+
+A query for principals with ath GENI.CTFaccess query, given the setup above looks like:
+
+[[Image(example10.png)]]