Changes between Version 26 and Version 27 of TIEDABACDemo


Ignore:
Timestamp:
07/13/09 18:06:28 (10 years ago)
Author:
faber@isi.edu
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • TIEDABACDemo

    v26 v27  
    111111[[Image(example14.png)]]
    112112
    113 Of particular interest is the dashed blue line connection the '''(ACM.gamerep).CTFcontestant''' attribute and the '''USC.CTFcontestant''' attribute boxes.  Unlike the other arrows in the graph, this connection is deduced from credentials rather than being specifically represented by one.  The text overlaying the snapshow shows the connection.
    114 
    115 [[Image(example15.png)]]
     113Of particular interest is the dashed blue line connection the '''(ACM.gamerep).CTFcontestant''' attribute and the '''USC.CTFcontestant''' attribute boxes.  Unlike the other arrows in the graph, this connection is deduced from credentials rather than being specifically represented by one.  The text overlaying the snapshow shows the connection between the rules and credentials as well as the implied edge.
     114
     115Again, a principal has all the attributes it can reach via edges (implied or explicit) in the graph.
     116
     117This direct nomination is the simplest way to had out credenitals.
     118
     119=== More Complex Delegations ===
     120
     121All the delegation mechanisms discussed so far work within the delegated principals.  So one can directly delegate directly by
     122
     123[[Image(example7.png)]]
     124
     125Which allows all students to participate
     126
     127Or indirectly by
     128
     129[[Image(example8.png)]]
     130
     131[[Image(example9.png)]]
     132
     133Which allows Mike, an ACM officer to select participants.
     134
     135== Overall ==
     136
     137A query for principals with ath GENI.CTFaccess query, given the setup above looks like:
     138
     139[[Image(example10.png)]]
    116140
    117141