Index: fedd/abac-src/rtml/examples/will/CVS/Entries
===================================================================
--- fedd/abac-src/rtml/examples/will/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/will/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,4 @@
+/sadmir.xml/1.2/Thu Jan 16 01:15:22 2003//
+/test/1.3/Mon Jan 20 01:35:13 2003//
+/ussh.xml/1.2/Mon Jan 20 01:35:13 2003//
+D
Index: fedd/abac-src/rtml/examples/will/CVS/Repository
===================================================================
--- fedd/abac-src/rtml/examples/will/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/will/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+rtml/examples/will
Index: fedd/abac-src/rtml/examples/will/CVS/Root
===================================================================
--- fedd/abac-src/rtml/examples/will/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/will/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+:ext:jjacobs@src.columbia.sparta.com/cvs/abac
Index: fedd/abac-src/rtml/examples/will/sadmir.xml
===================================================================
--- fedd/abac-src/rtml/examples/will/sadmir.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/will/sadmir.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,169 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<CredentialStore xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0
+  http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<ApplicationDomainSpecification uri="" id="FakeHashADSD01">
+		<RoleDeclaration name="friendly">
+			<Plain issuerTraces="all" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="getsSLocs">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="needsSLocs">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacCom">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="usr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacUsr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetUSTacCom">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="assignedNRet">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="friendlyUsr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+	</ApplicationDomainSpecification>
+	<Credential id="FakeHashCredential01">
+		<!-- SE.usr <- SAdmir-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SE"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="usr" domain="s"/>
+			<PrincipalRef shortName="SAdmir"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential02">
+		<!-- SE.friendly <- US -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="US">
+				<KeyHash>FakeHashKeyUS</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SE"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="friendly" domain="s"/>
+			<PrincipalRef shortName="US"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential03">
+		<!-- SAdmir.needsSLocs <- Sadmir.NRetTacCom.NRetTacUsr-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<LinkedContainment>
+			<HeadRoleTerm name="needsSLocs" domain="s"/>
+			<LinkedRole>
+				<RoleTerm name="NRetTacCom" domain="s"/>
+				<RoleTerm name="NRetTacUsr" domain="s"/>
+			</LinkedRole>
+		</LinkedContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential04">
+		<!-- SAdmir.NRetTacCom <- USEUCOM.NRetUSTacCom-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+			<Principal shortName="USEUCOM">
+				<KeyHash>FakeHashKeyUSEUCOM</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<SimpleContainment>
+			<HeadRoleTerm name="NRetTacCom" domain="s"/>
+			<ExternalRole>
+				<PrincipalRef shortName="USEUCOM"/>
+				<RoleTerm name="NRetTacCom" domain="s"/>
+			</ExternalRole>
+		</SimpleContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential05">
+		<!-- SAdmir.getsSLocs <- SE.friendly.usr ^ SAdmir.needsSLocs-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<SimpleContainment>
+			<HeadRoleTerm name="friendly" domain="s"/>
+			<ExternalRole>
+				<PrincipalRef shortName="SE"/>
+				<RoleTerm name="friendly" domain="s"/>
+			</ExternalRole>
+		</SimpleContainment>
+		<LinkedContainment>
+			<HeadRoleTerm name="friendlyUsr" domain="s"/>
+			<LinkedRole>
+				<RoleTerm name="friendly" domain="s"/>
+				<RoleTerm name="usr" domain="s"/>
+			</LinkedRole>
+		</LinkedContainment>
+		<IntersectionContainment>
+			<HeadRoleTerm name="getsSLocs" domain="s"/>
+			<Intersection>
+				<RoleTerm name="friendlyUsr" domain="s"/>
+				<RoleTerm name="needsSLocs" domain="s"/>
+			</Intersection>
+		</IntersectionContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+</CredentialStore>
Index: fedd/abac-src/rtml/examples/will/test
===================================================================
--- fedd/abac-src/rtml/examples/will/test	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/will/test	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,8 @@
+#!/bin/tcsh
+# Properties that are configurable:
+#
+#    edu.stanford.rt.SystemDomain - the file pathname for SystemSpec.xml
+#    com.nailabs.abac.credential.Hash - the hash id to examine 
+java 	-Dedu.stanford.rt.SystemDomain=${HOME}/rtml/schemas/SystemSpec.xml \
+	-Dcom.nailabs.abac.credential.Hash="FakeHashCredential05" \
+	com.nailabs.abac.credential.RtmlEngine ussh.xml
Index: fedd/abac-src/rtml/examples/will/ussh.xml
===================================================================
--- fedd/abac-src/rtml/examples/will/ussh.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/will/ussh.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,149 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<CredentialStore xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0
+  http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<ApplicationDomainSpecification uri="" id="FakeHashADSD02">
+		<RoleDeclaration name="friendly">
+			<Plain issuerTraces="all" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="getsSLocs">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacCom">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="usr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacUsr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetUSTacCom">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="assignedNRet">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="friendlyUsr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+	</ApplicationDomainSpecification>
+	<Credential id="FakeHashCredential01">
+		<!-- USN.assignedNRet <- USSH -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="USN">
+				<KeyHash>FakeHashKeyUSN</KeyHash>
+			</Principal>
+			<Principal shortName="USSH">
+				<KeyHash>FakeHashKeyUSSH</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="USN"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="assignedNRet" domain="s"/>
+			<PrincipalRef shortName="USSH"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential02">
+		<!-- US.usr <- USSH -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="USSH">
+				<KeyHash>FakeHashKeyUSSH</KeyHash>
+			</Principal>
+			<Principal shortName="US">
+				<KeyHash>FakeHashKeyUS</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="US"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="usr" domain="s"/>
+			<PrincipalRef shortName="USSH"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential03">
+		<!-- USEUCOM.NRetUSTacCom <- RADMSmith -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="USEUCOM">
+				<KeyHash>FakeHashKeyUSEUCOM</KeyHash>
+			</Principal>
+			<Principal shortName="RADMSmith">
+				<KeyHash>FakeHashKeyRADMSmith</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="USEUCOM"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="NRetUSTacCom" domain="s"/>
+			<PrincipalRef shortName="RADMSmith"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential04">
+		<!-- RADMSmith.NRetTacUsr <- USN.assignedNRet -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="RADMSmith">
+				<KeyHash>FakeHashKeyRADMSmith</KeyHash>
+			</Principal>
+			<Principal shortName="USN">
+				<KeyHash>FakeHashKeyUSN</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="USN"/>
+		</Issuer>
+		<SimpleContainment>
+			<HeadRoleTerm name="NRetTacUsr" domain="s"/>
+			<ExternalRole>
+				<PrincipalRef shortName="USN"/>
+				<RoleTerm name="assignedNRet" domain="s"/>
+			</ExternalRole>
+		</SimpleContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential05">
+		<!-- US.friendly <- SE -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="SE">
+				<KeyHash>FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="US">
+				<KeyHash>FakeHashKeyUS</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="US"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="friendly" domain="s"/>
+			<PrincipalRef shortName="SE"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+</CredentialStore>
