Index: fedd/abac-src/rtml/examples/CVS/Entries
===================================================================
--- fedd/abac-src/rtml/examples/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,3 @@
+/DistinguishedNameSpec.xml/1.1.1.1/Fri Nov 22 17:37:53 2002//
+/cred1_signed.xml/1.1.1.1/Fri Nov 22 17:37:53 2002//
+D
Index: fedd/abac-src/rtml/examples/CVS/Entries.Log
===================================================================
--- fedd/abac-src/rtml/examples/CVS/Entries.Log	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/CVS/Entries.Log	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,6 @@
+A D/DriverLicense////
+A D/EPub////
+A D/Email////
+A D/FB////
+A D/FW////
+A D/will////
Index: fedd/abac-src/rtml/examples/CVS/Repository
===================================================================
--- fedd/abac-src/rtml/examples/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+rtml/examples
Index: fedd/abac-src/rtml/examples/CVS/Root
===================================================================
--- fedd/abac-src/rtml/examples/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+:ext:jjacobs@src.columbia.sparta.com/cvs/abac
Index: fedd/abac-src/rtml/examples/DistinguishedNameSpec.xml
===================================================================
--- fedd/abac-src/rtml/examples/DistinguishedNameSpec.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/DistinguishedNameSpec.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<DomainSpecification xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="C:\rtml\DomainSpec.xsd" uri="" principalType="RSAKey">
+  <RecordTypeDeclaration name="DistinguishedNameType">
+    <FieldDeclaration name="CN" typeName="String"/>
+    <FieldDeclaration name="OU" typeName="String"/>
+    <FieldDeclaration name="O" typeName="String"/>
+    <FieldDeclaration name="C" typeName="String"/>
+  </RecordTypeDeclaration>
+  <RoleNameDeclaration name="DistinguishedName">
+    <ParameterDeclarations>
+      <Parameter name="subjectDN" typeName="DistinguishedNameType"/>
+    </ParameterDeclarations>
+  </RoleNameDeclaration>
+</DomainSpecification>
Index: fedd/abac-src/rtml/examples/DriverLicense/CVS/Entries
===================================================================
--- fedd/abac-src/rtml/examples/DriverLicense/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/DriverLicense/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,2 @@
+/DriverLicense.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+D
Index: fedd/abac-src/rtml/examples/DriverLicense/CVS/Repository
===================================================================
--- fedd/abac-src/rtml/examples/DriverLicense/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/DriverLicense/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+rtml/examples/DriverLicense
Index: fedd/abac-src/rtml/examples/DriverLicense/CVS/Root
===================================================================
--- fedd/abac-src/rtml/examples/DriverLicense/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/DriverLicense/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+:ext:jjacobs@src.columbia.sparta.com/cvs/abac
Index: fedd/abac-src/rtml/examples/DriverLicense/DriverLicense.xml
===================================================================
--- fedd/abac-src/rtml/examples/DriverLicense/DriverLicense.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/DriverLicense/DriverLicense.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by ABC (XYZ University) -->
+<DomainSpecification xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="C:\rtml\DomainSpec.xsd" uri="C:\rtml\DomainSpec.xsd">
+	<EnumTypeDeclaration name="USStatesType">
+		<EnumValue>CA</EnumValue>
+		<EnumValue>DC</EnumValue>
+		<EnumValue>NY</EnumValue>
+		<EnumValue>UT</EnumValue>
+	</EnumTypeDeclaration>
+	<EnumTypeDeclaration name="ColorType">
+		<EnumValue>BLK</EnumValue>
+		<EnumValue>BRN</EnumValue>
+	</EnumTypeDeclaration>
+	<EnumTypeDeclaration name="SexType">
+		<EnumValue>F</EnumValue>
+		<EnumValue>M</EnumValue>
+	</EnumTypeDeclaration>
+	<StringTypeDeclaration name="IDType"/>
+	<!-- The following uses StringType as type name, this is cheating.  We may want to add the notion of anonymous types.  These types would then be anonymous String Types.  -->
+	<RecordTypeDeclaration name="NameType">
+		<FieldDeclaration name="FirstName" typeName="StringType"/>
+		<FieldDeclaration name="MiddleName" typeName="StringType"/>
+		<FieldDeclaration name="LastName" typeName="StringType"/>
+	</RecordTypeDeclaration>
+	<RecordTypeDeclaration name="AddressType">
+		<FieldDeclaration name="Street" typeName="StringType"/>
+		<FieldDeclaration name="Apt" typeName="StringType"/>
+		<FieldDeclaration name="City" typeName="StringType"/>
+		<FieldDeclaration name="State" typeName="USStateType"/>
+		<FieldDeclaration name="Zip" typeName="StringType"/>
+	</RecordTypeDeclaration>
+	<RoleNameDeclaration name="DriverLicense">
+		<ParameterDeclarations>
+			<Parameter name="State" typeName="USStateType"/>
+			<Parameter name="ID" typeName="IDType"/>
+			<Parameter name="Name" typeName="NameType"/>
+			<Parameter name="Address" typeName="AddressType"/>
+			<Parameter name="Sex" typeName="SexType"/>
+			<Parameter name="Hair" typeName="ColorType"/>
+			<Parameter name="Eyes" typeName="ColorType"/>
+			<Parameter name="Height" typeName="HeightType"/>
+			<Parameter name="Weight" typeName="WeightType"/>
+			<Parameter name="RSTR" typeName="StringType"/>
+			<Parameter name="DOB" typeName="DateType"/>
+		</ParameterDeclarations>
+	</RoleNameDeclaration>
+</DomainSpecification>
Index: fedd/abac-src/rtml/examples/EPub/ABUADSD.xml
===================================================================
--- fedd/abac-src/rtml/examples/EPub/ABUADSD.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/EPub/ABUADSD.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<ApplicationDomainSpecification uri="C:\rtml\examples\EPub\ABUADSD.xml" 
+xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" 
+xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" 
+xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0 
+                    http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+       <EnumType name="degree">
+       	<EnumValue>B.S.</EnumValue>
+       	<EnumValue>M.S.</EnumValue>
+       	<EnumValue>Ph.D.</EnumValue>
+       </EnumType>
+	<RoleDeclaration name="University">
+		<Parameter name="name">
+			<Type name="string"/>
+		</Parameter>
+	</RoleDeclaration>
+	<RoleDeclaration name="Student">
+		<Parameter name="university">
+			<Type name="string"/>
+		</Parameter>
+		<Parameter name="department">
+			<Type name="string"/>
+		</Parameter>
+		<Parameter name="program">
+			<Type name="degree"/>
+		</Parameter>
+		<Parameter name="id">
+			<Type name="string"/>
+		</Parameter>
+		<Parameter name="name">
+			<Type name="person name"/>
+		</Parameter>
+	</RoleDeclaration>
+</ApplicationDomainSpecification>
Index: fedd/abac-src/rtml/examples/EPub/ABUCredential.xml
===================================================================
--- fedd/abac-src/rtml/examples/EPub/ABUCredential.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/EPub/ABUCredential.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<Credential xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0 
+                                http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<Preamble>
+		<DefaultDomain uri="C:\rtml\examples\EPub\ABUADSD.xml"/>
+		<Principal id="K_ABU">
+			<StringValue>
+			    /X9TgR11EilS30qcLuzk5/YRt1I870QAwx4/gLZRJmlFXUAiUftZPY1Y+r/F9bow9subVWzXgTuA
+			    HTRv8mZgt2uZUKWkn5/oBHsQIsJPu6nX/rfGG/g7V+fGqKYVDwT7g/bTxR7DAjVUE1oWkTL2dfOu
+			    K2HXKu/yIgMZndFIAcc=
+	  	    </StringValue>
+		</Principal>
+		<Principal id="K_StateU">
+			<StringValue>l2BQjxUjC8yykrmCouuEC/BYHPU=</StringValue>
+		</Principal>
+	</Preamble>
+	<Issuer>
+		<PrincipalRef ref="K_ABU"/>
+	</Issuer>
+	<SimpleMember>
+		<HeadRoleTerm name="University">
+			<Parameter name="name">
+				<StringValue>StateU</StringValue>
+			</Parameter>
+		</HeadRoleTerm>
+		<PrincipalRef ref="K_StateU"/>
+	</SimpleMember>
+	<ValidityTime>
+		<IssueTime>2002-08-26T12:52:00</IssueTime>
+	</ValidityTime>
+</Credential>
Index: fedd/abac-src/rtml/examples/EPub/ACMADSD.xml
===================================================================
--- fedd/abac-src/rtml/examples/EPub/ACMADSD.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/EPub/ACMADSD.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<ApplicationDomainSpecification uri="C:\rtml\examples\EPub\ACMADSD.xml" xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0 
+                    http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<EnumType name="member class">
+		<EnumValue>Professional</EnumValue>
+		<EnumValue>Student</EnumValue>
+	</EnumType>
+	<RoleDeclaration name="ACM Member">
+		<Parameter name="name">
+			<Type name="person name"/>
+		</Parameter>
+		<Parameter name="class">
+			<Type name="member class"/>
+		</Parameter>
+		<Parameter name="number">
+			<Type name="string"/>
+		</Parameter>
+	</RoleDeclaration>
+</ApplicationDomainSpecification>
Index: fedd/abac-src/rtml/examples/EPub/ACMCredential.xml
===================================================================
--- fedd/abac-src/rtml/examples/EPub/ACMCredential.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/EPub/ACMCredential.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,45 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<Credential xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0 
+                                http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<Preamble>
+		<DefaultDomain uri="C:\rtml\examples\EPub\ACMADSD.xml"/>
+		<Principal id="K_ACM">
+			<StringValue>
+				9+GghdabPd7LvKtcNrhXuXmUr7v6OuqC+VdMCz0HgmdRWVeOutRZT+ZxBxCBgLRJFnEj6EwoFhO3
+			   	zwkyjMim4TwWeotUfI0o4KOuHiuzpnWRbqN/C/ohNWLx+2J6ASQ7zKTxvqhRkImog9/hWuWfBpKL
+	    			Zl6Ae1UlZAFMO/7PSSo=
+	        </StringValue>
+		</Principal>
+		<Principal id="K_Bob">
+			<StringValue>0o4KOuHiuzpnWRbqN/C/ohN</StringValue>
+		</Principal>
+	</Preamble>
+	<Issuer>
+		<PrincipalRef ref="K_ACM"/>
+	</Issuer>
+	<SimpleMember>
+		<HeadRoleTerm name="ACM Member">
+			<Parameter name="number">
+				<StringValue>UJ11111</StringValue>
+			</Parameter>
+			<Parameter name="class">
+				<EnumValue>Professional</EnumValue>
+			</Parameter>
+			<Parameter name="name">
+				<Record>
+					<Field name="first name">
+						<StringValue>Bob</StringValue>
+					</Field>
+					<Field name="last name">
+						<StringValue>Smith</StringValue>
+					</Field>
+				</Record>
+			</Parameter>
+		</HeadRoleTerm>
+		<PrincipalRef ref="K_Bob"/>
+	</SimpleMember>
+	<ValidityTime>
+		<IssueTime>2002-08-26T12:52:00</IssueTime>
+	</ValidityTime>
+</Credential>
Index: fedd/abac-src/rtml/examples/EPub/CVS/Entries
===================================================================
--- fedd/abac-src/rtml/examples/EPub/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/EPub/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,14 @@
+/ABUADSD.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/ABUCredential.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/ACMADSD.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/ACMCredential.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/Discount.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/EPubADSD.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/StateUCredential.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/Student.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/University.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/acmMemberCredential.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/ex1.zip/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/studentCredential.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/universityCredential.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+D
Index: fedd/abac-src/rtml/examples/EPub/CVS/Repository
===================================================================
--- fedd/abac-src/rtml/examples/EPub/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/EPub/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+rtml/examples/EPub
Index: fedd/abac-src/rtml/examples/EPub/CVS/Root
===================================================================
--- fedd/abac-src/rtml/examples/EPub/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/EPub/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+:ext:jjacobs@src.columbia.sparta.com/cvs/abac
Index: fedd/abac-src/rtml/examples/EPub/Discount.xml
===================================================================
--- fedd/abac-src/rtml/examples/EPub/Discount.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/EPub/Discount.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<!-- 
+discount <- K_ACM.acmMember(name=?X, sice<=2001) and student(name=?X, program='graduate')
+-->
+<AccessRule xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0 
+                                http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<Preamble>
+		<DefaultDomain uri="C:\rtml\examples\EPub\EPubADSD.xml"/>
+		<ImportDomain name="ACM" uri="C:\rtml\examples\EPub\ACMADSD.xml"/>
+		<ImportDomain name="ABU" uri="C:\rtml\examples\EPub\ABUADSD.xml"/>
+		<Principal id="K_ACM">
+			<StringValue>
+			 9+GghdabPd7LvKtcNrhXuXmUr7v6OuqC+VdMCz0HgmdRWVeOutRZT+ZxBxCBgLRJFnEj6EwoFhO3
+ zwkyjMim4TwWeotUfI0o4KOuHiuzpnWRbqN/C/ohNWLx+2J6ASQ7zKTxvqhRkImog9/hWuWfBpKL
+ Zl6Ae1UlZAFMO/7PSSo=   
+ 			 </StringValue>
+		</Principal>
+	</Preamble>
+	<IntersectionContainment>
+		<HeadRoleTerm name="Discount"/>
+		<Intersection>
+			<ExternalRole>
+				<PrincipalRef ref="K_ACM"/>
+				<RoleTerm name="ACM Member" domain="ACM">
+					<Parameter name="name" id="memberName"/>
+					<Parameter name="since">
+						<Interval>
+							<To>
+								<TimeValue>2001</TimeValue>
+							</To>
+						</Interval>
+					</Parameter>
+				</RoleTerm>
+			</ExternalRole>
+			<RoleTerm name="Student" domain="ABU">
+				<Parameter name="name">
+					<Equals ref="memberName"/>
+				</Parameter>
+				<Parameter name="program">
+					<Set>
+						<EnumValue>M.S.</EnumValue>
+						<EnumValue>Ph.D.</EnumValue>
+					</Set>
+				</Parameter>
+			</RoleTerm>
+		</Intersection>
+	</IntersectionContainment>
+	<ValidityTime>
+		<IssueTime>2002-08-26T12:52:00</IssueTime>
+	</ValidityTime>
+</AccessRule>
Index: fedd/abac-src/rtml/examples/EPub/EPubADSD.xml
===================================================================
--- fedd/abac-src/rtml/examples/EPub/EPubADSD.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/EPub/EPubADSD.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<ApplicationDomainSpecification uri="C:\rtml\examples\EPub\EPubADSD.xml" xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0 
+                    http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<ImportDomain name="ABU" uri="C:\rtml\examples\EPub\ABUADSD.xml"/>
+	<ImportDomain name="ACM" uri="C:\rtml\examples\EPub\ACMADSD.xml"/>
+	<RoleDeclaration name="Discount"/>
+</ApplicationDomainSpecification>
Index: fedd/abac-src/rtml/examples/EPub/StateUCredential.xml
===================================================================
--- fedd/abac-src/rtml/examples/EPub/StateUCredential.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/EPub/StateUCredential.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<Credential xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0 
+                                http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<Preamble>
+		<DefaultDomain uri="C:\rtml\examples\EPub\ABUADSD.xml"/>
+		<Principal id="K_StateU">
+			<StringValue>l2BQjxUjC8yykrmCouuEC/BYHPU=</StringValue>
+		</Principal>
+		<Principal id="K_Bob">
+			<StringValue>0o4KOuHiuzpnWRbqN/C/ohN</StringValue>
+		</Principal>
+	</Preamble>
+	<Issuer>
+		<PrincipalRef ref="K_StateU"/>
+	</Issuer>
+	<SimpleMember>
+		<HeadRoleTerm name="Student">
+			<Parameter name="university">
+				<StringValue>StateU</StringValue>
+			</Parameter>
+			<Parameter name="department">
+				<StringValue>CS</StringValue>
+			</Parameter>
+			<Parameter name="program">
+				<EnumValue>M.S.</EnumValue>
+			</Parameter>
+			<Parameter name="id">
+				<StringValue>123456789</StringValue>
+			</Parameter>
+			<Parameter name="name">
+				<Record>
+					<Field name="first name">
+						<StringValue>Bob</StringValue>
+					</Field>
+					<Field name="last name">
+						<StringValue>Smith</StringValue>
+					</Field>
+				</Record>
+			</Parameter>
+		</HeadRoleTerm>
+		<PrincipalRef ref="K_Bob"/>
+	</SimpleMember>
+	<ValidityTime>
+		<IssueTime>2002-08-26T12:52:00</IssueTime>
+	</ValidityTime>
+</Credential>
Index: fedd/abac-src/rtml/examples/EPub/Student.xml
===================================================================
--- fedd/abac-src/rtml/examples/EPub/Student.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/EPub/Student.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<!-- 
+    student(university=?X) <=== university(name=?X)
+-->
+<AccessRule xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0 
+                                http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<Preamble>
+		<DefaultDomain uri="C:\rtml\examples\EPub\EPubADSD.xml"/>
+		<ImportDomain name="ABU" uri="C:\rtml\examples\EPub\ABUADSD.xml"/>
+	</Preamble>
+	<AdvancedDelegation>
+		<HeadRoleTerm name="Student" domain="ABU">
+			<Parameter name="university" id="univName"/>
+		</HeadRoleTerm>
+		<DelegateTo>
+			<RoleTerm name="University" domain="ABU">
+				<Parameter name="name">
+					<Equals ref="univName"/>
+				</Parameter>
+			</RoleTerm>
+		</DelegateTo>
+	</AdvancedDelegation>
+	<ValidityTime>
+		<IssueTime>2002-08-26T12:52:00</IssueTime>
+	</ValidityTime>
+</AccessRule>
Index: fedd/abac-src/rtml/examples/EPub/University.xml
===================================================================
--- fedd/abac-src/rtml/examples/EPub/University.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/EPub/University.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<!-- university <=== K_ABU -->
+<AccessRule xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0 
+                                http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<Preamble>
+		<DefaultDomain uri="C:\rtml\examples\EPub\EPubADSD.xml"/>
+		<ImportDomain name="ABU" uri="C:\rtml\examples\EPub\ABUADSD.xml"/>
+		<Principal id="K_ABU">
+			<StringValue>
+			    /X9TgR11EilS30qcLuzk5/YRt1I870QAwx4/gLZRJmlFXUAiUftZPY1Y+r/F9bow9subVWzXgTuA
+			    HTRv8mZgt2uZUKWkn5/oBHsQIsJPu6nX/rfGG/g7V+fGqKYVDwT7g/bTxR7DAjVUE1oWkTL2dfOu
+			    K2HXKu/yIgMZndFIAcc=
+			</StringValue>
+		</Principal>
+	</Preamble>
+	<SimpleDelegation>
+		<HeadRoleTerm name="University" domain="ABU"/>
+		<DelegateTo>
+			<PrincipalRef ref="K_ABU"/>
+		</DelegateTo>
+	</SimpleDelegation>
+	<ValidityTime>
+		<IssueTime>2002-08-26T12:52:00</IssueTime>
+	</ValidityTime>
+</AccessRule>
Index: fedd/abac-src/rtml/examples/EPub/acmMemberCredential.xml
===================================================================
--- fedd/abac-src/rtml/examples/EPub/acmMemberCredential.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/EPub/acmMemberCredential.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,45 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<Credential xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0 
+                                http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<Preamble>
+		<DefaultDomain uri="C:\rtml\examples\EPub\ACMADSD.xml"/>
+		<Principal id="K_ACM">
+			<StringValue>
+				9+GghdabPd7LvKtcNrhXuXmUr7v6OuqC+VdMCz0HgmdRWVeOutRZT+ZxBxCBgLRJFnEj6EwoFhO3
+			   	zwkyjMim4TwWeotUfI0o4KOuHiuzpnWRbqN/C/ohNWLx+2J6ASQ7zKTxvqhRkImog9/hWuWfBpKL
+	    			Zl6Ae1UlZAFMO/7PSSo=
+	        </StringValue>
+		</Principal>
+		<Principal id="K_Bob">
+			<StringValue>0o4KOuHiuzpnWRbqN/C/ohN</StringValue>
+		</Principal>
+	</Preamble>
+	<Issuer>
+		<PrincipalRef ref="K_ACM"/>
+	</Issuer>
+	<SimpleMember>
+		<HeadRoleTerm name="ACM Member">
+			<Parameter name="number">
+				<StringValue>UJ11111</StringValue>
+			</Parameter>
+			<Parameter name="class">
+				<EnumValue>Professional</EnumValue>
+			</Parameter>
+			<Parameter name="name">
+				<Record>
+					<Field name="first name">
+						<StringValue>Bob</StringValue>
+					</Field>
+					<Field name="last name">
+						<StringValue>Smith</StringValue>
+					</Field>
+				</Record>
+			</Parameter>
+		</HeadRoleTerm>
+		<PrincipalRef ref="K_Bob"/>
+	</SimpleMember>
+	<ValidityTime>
+		<IssueTime>2002-08-26T12:52:00</IssueTime>
+	</ValidityTime>
+</Credential>
Index: fedd/abac-src/rtml/examples/EPub/studentCredential.xml
===================================================================
--- fedd/abac-src/rtml/examples/EPub/studentCredential.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/EPub/studentCredential.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<Credential xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0 
+                                http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<Preamble>
+		<DefaultDomain uri="C:\rtml\examples\EPub\ABUADSD.xml"/>
+		<Principal id="K_StateU">
+			<StringValue>l2BQjxUjC8yykrmCouuEC/BYHPU=</StringValue>
+		</Principal>
+		<Principal id="K_Bob">
+			<StringValue>0o4KOuHiuzpnWRbqN/C/ohN</StringValue>
+		</Principal>
+	</Preamble>
+	<Issuer>
+		<PrincipalRef ref="K_StateU"/>
+	</Issuer>
+	<SimpleMember>
+		<HeadRoleTerm name="Student">
+			<Parameter name="university">
+				<StringValue>StateU</StringValue>
+			</Parameter>
+			<Parameter name="department">
+				<StringValue>CS</StringValue>
+			</Parameter>
+			<Parameter name="program">
+				<EnumValue>M.S.</EnumValue>
+			</Parameter>
+			<Parameter name="id">
+				<StringValue>123456789</StringValue>
+			</Parameter>
+			<Parameter name="name">
+				<Record>
+					<Field name="first name">
+						<StringValue>Bob</StringValue>
+					</Field>
+					<Field name="last name">
+						<StringValue>Smith</StringValue>
+					</Field>
+				</Record>
+			</Parameter>
+		</HeadRoleTerm>
+		<PrincipalRef ref="K_Bob"/>
+	</SimpleMember>
+	<ValidityTime>
+		<IssueTime>2002-08-26T12:52:00</IssueTime>
+	</ValidityTime>
+</Credential>
Index: fedd/abac-src/rtml/examples/EPub/universityCredential.xml
===================================================================
--- fedd/abac-src/rtml/examples/EPub/universityCredential.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/EPub/universityCredential.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<Credential xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0 
+                                http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<Preamble>
+		<DefaultDomain uri="C:\rtml\examples\EPub\ABUADSD.xml"/>
+		<Principal id="K_ABU">
+			<StringValue>
+			    /X9TgR11EilS30qcLuzk5/YRt1I870QAwx4/gLZRJmlFXUAiUftZPY1Y+r/F9bow9subVWzXgTuA
+			    HTRv8mZgt2uZUKWkn5/oBHsQIsJPu6nX/rfGG/g7V+fGqKYVDwT7g/bTxR7DAjVUE1oWkTL2dfOu
+			    K2HXKu/yIgMZndFIAcc=
+	  	    </StringValue>
+		</Principal>
+		<Principal id="K_StateU">
+			<StringValue>l2BQjxUjC8yykrmCouuEC/BYHPU=</StringValue>
+		</Principal>
+	</Preamble>
+	<Issuer>
+		<PrincipalRef ref="K_ABU"/>
+	</Issuer>
+	<SimpleMember>
+		<HeadRoleTerm name="University">
+			<Parameter name="name">
+				<StringValue>StateU</StringValue>
+			</Parameter>
+		</HeadRoleTerm>
+		<PrincipalRef ref="K_StateU"/>
+	</SimpleMember>
+	<ValidityTime>
+		<IssueTime>2002-08-26T12:52:00</IssueTime>
+	</ValidityTime>
+</Credential>
Index: fedd/abac-src/rtml/examples/Email/CVS/Entries
===================================================================
--- fedd/abac-src/rtml/examples/Email/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/Email/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,3 @@
+/EMailSpec.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/cred1.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+D
Index: fedd/abac-src/rtml/examples/Email/CVS/Repository
===================================================================
--- fedd/abac-src/rtml/examples/Email/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/Email/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+rtml/examples/Email
Index: fedd/abac-src/rtml/examples/Email/CVS/Root
===================================================================
--- fedd/abac-src/rtml/examples/Email/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/Email/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+:ext:jjacobs@src.columbia.sparta.com/cvs/abac
Index: fedd/abac-src/rtml/examples/Email/EMailSpec.xml
===================================================================
--- fedd/abac-src/rtml/examples/Email/EMailSpec.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/Email/EMailSpec.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by ABC (XYZ University) -->
+<ApplicationDomainSpecification xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://crypto.stanford.edu/~ninghui/rtml/DomainSpec.xsd" uri="C:\rtml\examples\email\EmailSpec.xml" principalType="RSAKey">
+	<TreeTypeDeclaration name="DNSType" separator="." order="rootLast"/>
+	<RoleDeclaration name="EMailAddress">
+		<ParameterDeclaration name="domain">
+			<Type name="DNSType"/>
+		</ParameterDeclaration>
+		<ParameterDeclaration name="user">
+			<Type name="string"/>
+		</ParameterDeclaration>
+	</RoleDeclaration>
+</ApplicationDomainSpecification>
Index: fedd/abac-src/rtml/examples/Email/cred1.xml
===================================================================
--- fedd/abac-src/rtml/examples/Email/cred1.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/Email/cred1.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<Credential xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="C:\rtml\Credentials.xsd">
+	<Issuer>
+		<!-- The following is cheating.  We should use a name space (maybe XML Signature) that defines elements like RSAKey and use the RSAKey element instead of StringValue here.-->
+		<Principal><StringValue>RSA:abc123456</StringValue></Principal>
+	</Issuer>
+	<ImportDomain domain="email" source="C:\rtml\examples\email\EmailSpec.xml"/>
+	<RoleDefinition>
+		<Head>
+			<RoleTerm roleName="EMailAddress" domain="email">
+				<Parameter name="domain">
+					<TreeValue>stanford.edu</TreeValue>
+				</Parameter>
+				<Parameter name="user">
+					<StringValue>ninghui</StringValue>
+				</Parameter>
+			</RoleTerm>
+		</Head>
+		<Body>
+			<Principal><StringValue>DSA:4401ff92</StringValue></Principal>
+		</Body>
+	</RoleDefinition>
+</Credential>
Index: fedd/abac-src/rtml/examples/FB/BankADSD.xml
===================================================================
--- fedd/abac-src/rtml/examples/FB/BankADSD.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/FB/BankADSD.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<ApplicationDomainSpecification xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="C:\rtml\schemas\DomainSpec.xsd" uri="C:\rtml\examples\FB\BankADSD.xml">
+	<RoleDeclaration name="employNumber" isIdentity="true">
+		<Parameter name="ID">
+			<Type name="string"/>
+		</Parameter>
+	</RoleDeclaration>
+	<RoleDeclaration name="manager"/>
+	<RoleDeclaration name="cashier"/>
+	<RoleDeclaration name="auditor"/>
+	<RoleDeclaration name="twoCashier" dimension="2">
+		<IdentityBaseRole name="employeeNumber"/>
+	</RoleDeclaration>
+	<RoleDeclaration name="managerAndTwoCashier" dimension="3">
+		<IdentityBaseRole name="employeeNumber"/>
+	</RoleDeclaration>
+	<RoleDeclaration name="approval" dimension="4">
+		<IdentityBaseRole name="employeeNumber"/>
+	</RoleDeclaration>
+</ApplicationDomainSpecification>
Index: fedd/abac-src/rtml/examples/FB/CVS/Entries
===================================================================
--- fedd/abac-src/rtml/examples/FB/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/FB/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,5 @@
+/BankADSD.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/approval.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/managerAndTwoCashier.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/twoCashier.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+D
Index: fedd/abac-src/rtml/examples/FB/CVS/Repository
===================================================================
--- fedd/abac-src/rtml/examples/FB/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/FB/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+rtml/examples/FB
Index: fedd/abac-src/rtml/examples/FB/CVS/Root
===================================================================
--- fedd/abac-src/rtml/examples/FB/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/FB/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+:ext:jjacobs@src.columbia.sparta.com/cvs/abac
Index: fedd/abac-src/rtml/examples/FB/approval.xml
===================================================================
--- fedd/abac-src/rtml/examples/FB/approval.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/FB/approval.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<AccessRule xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="C:\rtml\schemas\Credential.xsd">
+	<Preamble>
+		<DefaultDomain uri="C:\rtml\examples\FB\BankADSD.xml"/>
+	</Preamble>
+	<ExclusiveProductContainment>
+		<HeadRoleTerm name="approval"/>
+		<ExclusiveProduct>
+			<RoleTerm name="auditor"/>
+			<RoleTerm name="managerAndTwoCashier"/>
+		</ExclusiveProduct>
+	</ExclusiveProductContainment>
+	<ValidityTime>
+		<IssuedAt>2002-08-27T10:23:34</IssuedAt>
+		<ValidFrom>2002-08-27T10:23:34</ValidFrom>
+		<ValidTo>2002-09-27T10:23:34</ValidTo>
+	</ValidityTime>
+</AccessRule>
Index: fedd/abac-src/rtml/examples/FB/managerAndTwoCashier.xml
===================================================================
--- fedd/abac-src/rtml/examples/FB/managerAndTwoCashier.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/FB/managerAndTwoCashier.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<AccessRule xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="C:\rtml\schemas\Credential.xsd">
+	<Preamble>
+		<DefaultDomain uri="C:\rtml\examples\FB\BankADSD.xml"/>
+	</Preamble>
+	<ProductContainment>
+		<HeadRoleTerm name="managerAndTwoCashier"/>
+		<Product>
+			<RoleTerm name="manager"/>
+			<RoleTerm name="twoCashier"/>
+		</Product>
+	</ProductContainment>
+	<ValidityTime>
+		<IssuedAt>2002-08-27T10:23:34</IssuedAt>
+		<ValidFrom>2002-08-27T10:23:34</ValidFrom>
+		<ValidTo>2002-09-27T10:23:34</ValidTo>
+	</ValidityTime>
+</AccessRule>
Index: fedd/abac-src/rtml/examples/FB/twoCashier.xml
===================================================================
--- fedd/abac-src/rtml/examples/FB/twoCashier.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/FB/twoCashier.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<AccessRule xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="C:\rtml\schemas\Credential.xsd">
+	<Preamble>
+		<DefaultDomain uri="C:\rtml\examples\FB\BankADSD.xml"/>
+	</Preamble>
+	<ExclusiveProductContainment>
+		<HeadRoleTerm name="twoCashier"/>
+		<ExclusiveProduct>
+			<RoleTerm name="cashier"/>
+			<RoleTerm name="cashier"/>
+		</ExclusiveProduct>
+	</ExclusiveProductContainment>
+	<ValidityTime>
+		<IssuedAt>2002-08-27T10:23:34</IssuedAt>
+		<ValidFrom>2002-08-27T10:23:34</ValidFrom>
+		<ValidTo>2002-09-27T10:23:34</ValidTo>
+	</ValidityTime>
+</AccessRule>
Index: fedd/abac-src/rtml/examples/FW/CVS/Entries
===================================================================
--- fedd/abac-src/rtml/examples/FW/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/FW/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,7 @@
+/FWADSD1.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/FWADSD2.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/StanfordADSD.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/StudentID.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/netPerm.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+/networkPerm.xml/1.1.1.1/Fri Nov 22 17:37:54 2002//
+D
Index: fedd/abac-src/rtml/examples/FW/CVS/Repository
===================================================================
--- fedd/abac-src/rtml/examples/FW/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/FW/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+rtml/examples/FW
Index: fedd/abac-src/rtml/examples/FW/CVS/Root
===================================================================
--- fedd/abac-src/rtml/examples/FW/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/FW/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+:ext:jjacobs@src.columbia.sparta.com/cvs/abac
Index: fedd/abac-src/rtml/examples/FW/FWADSD1.xml
===================================================================
--- fedd/abac-src/rtml/examples/FW/FWADSD1.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/FW/FWADSD1.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<ApplicationDomainSpecification uri="http://crypto.stanford.edu/~ninghui/rtml/examples/FWADSD1.xml" xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0 
+                        http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<RoleDeclaration name="hostPerm">
+		<Parameter name="host">
+			<Type name="dns"/>
+		</Parameter>
+	</RoleDeclaration>
+</ApplicationDomainSpecification>
Index: fedd/abac-src/rtml/examples/FW/FWADSD2.xml
===================================================================
--- fedd/abac-src/rtml/examples/FW/FWADSD2.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/FW/FWADSD2.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<ApplicationDomainSpecification uri="http://crypto.stanford.edu/~ninghui/rtml/examples/FWADSD2.xml" xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0 
+                http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<IncludeDomain uri="http://crypto.stanford.edu/~ninghui/rtml/examples/FWADSD1.xml"/>
+	<RoleDeclaration name="socketPerm">
+		<Restriction>
+			<BaseRole name="hostPerm"/>
+		</Restriction>
+		<Parameter name="port">
+			<Type name="unsigned short"/>
+		</Parameter>
+	</RoleDeclaration>
+</ApplicationDomainSpecification>
Index: fedd/abac-src/rtml/examples/FW/StanfordADSD.xml
===================================================================
--- fedd/abac-src/rtml/examples/FW/StanfordADSD.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/FW/StanfordADSD.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<ApplicationDomainSpecification xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="C:\rtml\schemas\DomainSpec.xsd" uri="C:\rtml\examples\FW\StanfordADSD.xml">
+	<RoleDeclaration name="StudentID"/>
+</ApplicationDomainSpecification>
Index: fedd/abac-src/rtml/examples/FW/StudentID.xml
===================================================================
--- fedd/abac-src/rtml/examples/FW/StudentID.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/FW/StudentID.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<Credential xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="C:\rtml\schemas\Credential.xsd">
+	<Preamble>
+		<DefaultDomain uri="C:\rtml\examples\FW\StanfordADSD.xml"/>
+		<Principal id="K_Stanford">
+			<ds:KeyValue>HTRv8mZgt2uZUKWkn5/oB</ds:KeyValue>
+		</Principal>
+		<Principal id="K_Alice">
+			<ds:KeyValue>2J6ASQ7zKTxvqhRkImog9/hWuWfBpKL</ds:KeyValue>
+		</Principal>
+	</Preamble>
+	<Issuer>
+		<PrincipalRef ref="K_Stanford"/>
+	</Issuer>
+	<SimpleMember>
+		<HeadRoleTerm name="StudentID"/>
+		<PrincipalRef ref="K_Alice"/>
+	</SimpleMember>
+	<ValidityTime>
+		<IssuedAt>2002-08-27T10:23:34</IssuedAt>
+		<ValidFrom>2002-08-27T10:23:34</ValidFrom>
+		<ValidTo>2002-09-27T10:23:34</ValidTo>
+	</ValidityTime>
+</Credential>
Index: fedd/abac-src/rtml/examples/FW/netPerm.xml
===================================================================
--- fedd/abac-src/rtml/examples/FW/netPerm.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/FW/netPerm.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<Credential
+xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0 
+                            http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+  <Preamble>
+    <DefaultDomain uri="C:\rtml\examples\FW\FWADSD.xml"/>
+    <ImportDomain name="Stanford" uri="C:\rtml\examples\FW\StanfordADSD.xml"/>
+    <Principal id="K_SA">
+      <ds:KeyValue>HTRv8mZgt2uZUKWkn5/oBHsQIsJPu6nX/rfGG/</ds:KeyValue>
+    </Principal>
+    <Principal id="K_Stanford">
+      <ds:KeyValue>HTRv8mZgt2uZUKWkn5/oB</ds:KeyValue>
+    </Principal>
+  </Preamble>
+  <Issuer>
+    <Principal id="K_FW">
+      <ds:KeyValue>Eln5/htZP51p7Y/Y1+zZOSSmoi2fQS0deniScan3990</ds:KeyValue>
+    </Principal>
+  </Issuer>
+  <SimpleDelegation>
+    <HeadRoleTerm name="hostPerm">
+      <Parameter name="host">
+        <TreeValue includeCurrent="true" includeDescendents="true">cs.stanford.edu</TreeValue>
+      </Parameter>
+    </HeadRoleTerm>
+    <DelegateTo>
+      <PrincipalRef ref="K_SA"/>
+    </DelegateTo>
+    <Control>
+      <ExternalRole>
+        <PrincipalRef ref="K_Stanford"/>
+        <RoleTerm name="StudentID" domain="Stanford"/>
+      </ExternalRole>
+    </Control>
+  </SimpleDelegation>
+  <ValidityTime>
+    <IssueTime>2002-08-27T10:23:34</IssueTime>
+    <NotAfter>2002-09-27T10:23:34</NotAfter>
+  </ValidityTime>
+</Credential>
Index: fedd/abac-src/rtml/examples/FW/networkPerm.xml
===================================================================
--- fedd/abac-src/rtml/examples/FW/networkPerm.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/FW/networkPerm.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<Credential
+xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0 
+                            http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<Preamble>
+		<DefaultDomain uri="C:\rtml\examples\FW\SAADSD.xml"/>
+		<Principal id="K_SA">
+			<ds:KeyValue>HTRv8mZgt2uZUKWkn5/oBHsQIsJPu6nX/rfGG/</ds:KeyValue>
+		</Principal>
+		<Principal id="K_Alice">
+			<ds:KeyValue>2J6ASQ7zKTxvqhRkImog9/hWuWfBpKL</ds:KeyValue>
+		</Principal>
+	</Preamble>
+	<Issuer>
+		<PrincipalRef ref="K_SA"/>
+	</Issuer>
+	<SimpleMember>
+		<HeadRoleTerm name="networkPerm">
+			<Parameter name="host">
+				<TreeValue includeDescendents="true" includeCurrent="false">stanford.edu</TreeValue>
+			</Parameter>
+			<Parameter name="port">
+				<Interval>
+					<From>
+						<IntegerValue>8000</IntegerValue>
+					</From>
+					<To>
+						<IntegerValue>8443</IntegerValue>
+					</To>
+				</Interval>
+			</Parameter>
+		</HeadRoleTerm>
+		<PrincipalRef ref="K_Alice"/>
+	</SimpleMember>
+	<ValidityTime>
+		<IssueTime>2002-08-27T10:23:34</IssueTime>
+		<NotAfter>2002-09-27T10:23:34</NotAfter>
+	</ValidityTime>
+</Credential>
Index: fedd/abac-src/rtml/examples/cred1_signed.xml
===================================================================
--- fedd/abac-src/rtml/examples/cred1_signed.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/cred1_signed.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,94 @@
+<Credential xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="C:\rtml\Credentials.xsd">
+  <Issuer Id="issuerId">
+    <Principal>
+      <KeyValue>
+	<DSAKeyValue>
+	  <P>
+	    /X9TgR11EilS30qcLuzk5/YRt1I870QAwx4/gLZRJmlFXUAiUftZPY1Y+r/F9bow9subVWzXgTuA
+	    HTRv8mZgt2uZUKWkn5/oBHsQIsJPu6nX/rfGG/g7V+fGqKYVDwT7g/bTxR7DAjVUE1oWkTL2dfOu
+	    K2HXKu/yIgMZndFIAcc=
+	  </P>
+	  <Q>l2BQjxUjC8yykrmCouuEC/BYHPU=</Q>
+	  <G>
+	    9+GghdabPd7LvKtcNrhXuXmUr7v6OuqC+VdMCz0HgmdRWVeOutRZT+ZxBxCBgLRJFnEj6EwoFhO3
+	    zwkyjMim4TwWeotUfI0o4KOuHiuzpnWRbqN/C/ohNWLx+2J6ASQ7zKTxvqhRkImog9/hWuWfBpKL
+	    Zl6Ae1UlZAFMO/7PSSo=
+	  </G>
+	  <Y>
+	    Eln5/htZP51p7Y/Y1+zZOSSmoi2fQS0deniScan3990xy33RrPfF5odqEVmVYfTzFfKEz94aUXEY
+	    qY2VGVRCKrAZThk1SwoOB+UyfNSVjoqa4fppIQpTalK/JeR7uxQUr0Aeop68nr2u49GijYiLyvL3
+	    x04lGaZ8jUYZL3gZTNI=
+	  </Y>
+	</DSAKeyValue>
+      </KeyValue>
+    </Principal>
+  </Issuer>
+  <ImportDomain domain="email" source="C:\rtml\examples\email\EmailSpec.xml" Id="importDomain"></ImportDomain>
+  <RoleDefinition Id="emailRole">
+    <Head>
+      <RoleTerm domain="email" roleName="EMailAddress">
+	<Parameter name="domain">
+	  <TreeValue>stanford.edu</TreeValue>
+	</Parameter>
+	<Parameter name="user">
+	  <StringValue>ninghui</StringValue>
+	</Parameter>
+      </RoleTerm>
+    </Head>
+    <Body>
+      <Principal>
+	<KeyValue>
+	  <RSAKeyValue>
+	    <Modulus>
+	      832n6bfJJHd=3NRdjq/iPm
+	    </Modulus>
+	    <Exponent>
+	      qmMrk/j0D0ORnxz
+	    </Exponent>
+	  </RSAKeyValue>
+	</KeyValue>
+      </Principal>
+    </Body>
+  </RoleDefinition>
+  <ValidityData>
+    <Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
+      <SignedInfo>
+	<CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315"></CanonicalizationMethod>
+	<SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1"></SignatureMethod>
+	<Reference URI="">
+	  <Transforms>
+	    <Transform Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315#WithComments"></Transform>
+	    <Transform Algorithm="http://www.w3.org/TR/1999/REC-xpath-19991116">
+	      <XPath>
+		child::*[id() = "emailRole" or id() = "importDomain"]
+	      </XPath>
+	    </Transform>
+	  </Transforms>
+	  <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"></DigestMethod>
+	  <DigestValue>iuX0Jryf3xL/nAOgy5/hMmb2m20=</DigestValue>
+	</Reference>
+      </SignedInfo>
+      <SignatureValue>CFWQ9kkagnpiDApGPCzxKdaI45dCXexAxOTHWkoHgWbK/bRVmW+ztg==</SignatureValue>
+      <KeyInfo>
+	<X509Data>
+	  <X509Certificate>
+	    MIIC9jCCArQCBDruqiowCwYHKoZIzjgEAwUAMGExCzAJBgNVBAYTAkRFMR0wGwYDVQQKExRVbml2
+	    ZXJzaXR5IG9mIFNpZWdlbjEQMA4GA1UECxMHRkIxMk5VRTEhMB8GA1UEAxMYQ2hyaXN0aWFuIEdl
+	    dWVyLVBvbGxtYW5uMB4XDTAxMDUwMTEyMjA1OFoXDTA2MTAyMjEyMjA1OFowYTELMAkGA1UEBhMC
+	    REUxHTAbBgNVBAoTFFVuaXZlcnNpdHkgb2YgU2llZ2VuMRAwDgYDVQQLEwdGQjEyTlVFMSEwHwYD
+	    VQQDExhDaHJpc3RpYW4gR2V1ZXItUG9sbG1hbm4wggG3MIIBLAYHKoZIzjgEATCCAR8CgYEA/X9T
+	    gR11EilS30qcLuzk5/YRt1I870QAwx4/gLZRJmlFXUAiUftZPY1Y+r/F9bow9subVWzXgTuAHTRv
+	    8mZgt2uZUKWkn5/oBHsQIsJPu6nX/rfGG/g7V+fGqKYVDwT7g/bTxR7DAjVUE1oWkTL2dfOuK2HX
+	    Ku/yIgMZndFIAccCFQCXYFCPFSMLzLKSuYKi64QL8Fgc9QKBgQD34aCF1ps93su8q1w2uFe5eZSv
+	    u/o66oL5V0wLPQeCZ1FZV4661FlP5nEHEIGAtEkWcSPoTCgWE7fPCTKMyKbhPBZ6i1R8jSjgo64e
+	    K7OmdZFuo38L+iE1YvH7YnoBJDvMpPG+qFGQiaiD3+Fa5Z8GkotmXoB7VSVkAUw7/s9JKgOBhAAC
+	    gYASWfn+G1k/nWntj9jX7Nk5JKaiLZ9BLR16eJJxqff33THLfdGs98Xmh2oRWZVh9PMV8oTP3hpR
+	    cRipjZUZVEIqsBlOGTVLCg4H5TJ81JWOiprh+mkhClNqUr8l5Hu7FBSvQB6inryeva7j0aKNiIvK
+	    8vfHTiUZpnyNRhkveBlM0jALBgcqhkjOOAQDBQADLwAwLAIUPDd/UmB9GeHqvGjny30Bvjt0AkUC
+	    FA9ab72kKuB5geYGeckbBrcgPnZk
+	  </X509Certificate>
+	</X509Data>
+      </KeyInfo>
+    </Signature>
+  </ValidityData>
+</Credential>
Index: fedd/abac-src/rtml/examples/will/CVS/Entries
===================================================================
--- fedd/abac-src/rtml/examples/will/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/will/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,4 @@
+/sadmir.xml/1.2/Thu Jan 16 01:15:22 2003//
+/test/1.3/Mon Jan 20 01:35:13 2003//
+/ussh.xml/1.2/Mon Jan 20 01:35:13 2003//
+D
Index: fedd/abac-src/rtml/examples/will/CVS/Repository
===================================================================
--- fedd/abac-src/rtml/examples/will/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/will/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+rtml/examples/will
Index: fedd/abac-src/rtml/examples/will/CVS/Root
===================================================================
--- fedd/abac-src/rtml/examples/will/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/will/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+:ext:jjacobs@src.columbia.sparta.com/cvs/abac
Index: fedd/abac-src/rtml/examples/will/sadmir.xml
===================================================================
--- fedd/abac-src/rtml/examples/will/sadmir.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/will/sadmir.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,169 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<CredentialStore xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0
+  http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<ApplicationDomainSpecification uri="" id="FakeHashADSD01">
+		<RoleDeclaration name="friendly">
+			<Plain issuerTraces="all" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="getsSLocs">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="needsSLocs">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacCom">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="usr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacUsr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetUSTacCom">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="assignedNRet">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="friendlyUsr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+	</ApplicationDomainSpecification>
+	<Credential id="FakeHashCredential01">
+		<!-- SE.usr <- SAdmir-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SE"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="usr" domain="s"/>
+			<PrincipalRef shortName="SAdmir"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential02">
+		<!-- SE.friendly <- US -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="US">
+				<KeyHash>FakeHashKeyUS</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SE"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="friendly" domain="s"/>
+			<PrincipalRef shortName="US"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential03">
+		<!-- SAdmir.needsSLocs <- Sadmir.NRetTacCom.NRetTacUsr-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<LinkedContainment>
+			<HeadRoleTerm name="needsSLocs" domain="s"/>
+			<LinkedRole>
+				<RoleTerm name="NRetTacCom" domain="s"/>
+				<RoleTerm name="NRetTacUsr" domain="s"/>
+			</LinkedRole>
+		</LinkedContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential04">
+		<!-- SAdmir.NRetTacCom <- USEUCOM.NRetUSTacCom-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+			<Principal shortName="USEUCOM">
+				<KeyHash>FakeHashKeyUSEUCOM</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<SimpleContainment>
+			<HeadRoleTerm name="NRetTacCom" domain="s"/>
+			<ExternalRole>
+				<PrincipalRef shortName="USEUCOM"/>
+				<RoleTerm name="NRetTacCom" domain="s"/>
+			</ExternalRole>
+		</SimpleContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential05">
+		<!-- SAdmir.getsSLocs <- SE.friendly.usr ^ SAdmir.needsSLocs-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<SimpleContainment>
+			<HeadRoleTerm name="friendly" domain="s"/>
+			<ExternalRole>
+				<PrincipalRef shortName="SE"/>
+				<RoleTerm name="friendly" domain="s"/>
+			</ExternalRole>
+		</SimpleContainment>
+		<LinkedContainment>
+			<HeadRoleTerm name="friendlyUsr" domain="s"/>
+			<LinkedRole>
+				<RoleTerm name="friendly" domain="s"/>
+				<RoleTerm name="usr" domain="s"/>
+			</LinkedRole>
+		</LinkedContainment>
+		<IntersectionContainment>
+			<HeadRoleTerm name="getsSLocs" domain="s"/>
+			<Intersection>
+				<RoleTerm name="friendlyUsr" domain="s"/>
+				<RoleTerm name="needsSLocs" domain="s"/>
+			</Intersection>
+		</IntersectionContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+</CredentialStore>
Index: fedd/abac-src/rtml/examples/will/test
===================================================================
--- fedd/abac-src/rtml/examples/will/test	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/will/test	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,8 @@
+#!/bin/tcsh
+# Properties that are configurable:
+#
+#    edu.stanford.rt.SystemDomain - the file pathname for SystemSpec.xml
+#    com.nailabs.abac.credential.Hash - the hash id to examine 
+java 	-Dedu.stanford.rt.SystemDomain=${HOME}/rtml/schemas/SystemSpec.xml \
+	-Dcom.nailabs.abac.credential.Hash="FakeHashCredential05" \
+	com.nailabs.abac.credential.RtmlEngine ussh.xml
Index: fedd/abac-src/rtml/examples/will/ussh.xml
===================================================================
--- fedd/abac-src/rtml/examples/will/ussh.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/rtml/examples/will/ussh.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,149 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<CredentialStore xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0
+  http://crypto.stanford.edu/~ninghui/rtml/RTMLv1.0q.xsd">
+	<ApplicationDomainSpecification uri="" id="FakeHashADSD02">
+		<RoleDeclaration name="friendly">
+			<Plain issuerTraces="all" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="getsSLocs">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacCom">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="usr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacUsr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetUSTacCom">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="assignedNRet">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="friendlyUsr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+	</ApplicationDomainSpecification>
+	<Credential id="FakeHashCredential01">
+		<!-- USN.assignedNRet <- USSH -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="USN">
+				<KeyHash>FakeHashKeyUSN</KeyHash>
+			</Principal>
+			<Principal shortName="USSH">
+				<KeyHash>FakeHashKeyUSSH</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="USN"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="assignedNRet" domain="s"/>
+			<PrincipalRef shortName="USSH"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential02">
+		<!-- US.usr <- USSH -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="USSH">
+				<KeyHash>FakeHashKeyUSSH</KeyHash>
+			</Principal>
+			<Principal shortName="US">
+				<KeyHash>FakeHashKeyUS</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="US"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="usr" domain="s"/>
+			<PrincipalRef shortName="USSH"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential03">
+		<!-- USEUCOM.NRetUSTacCom <- RADMSmith -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="USEUCOM">
+				<KeyHash>FakeHashKeyUSEUCOM</KeyHash>
+			</Principal>
+			<Principal shortName="RADMSmith">
+				<KeyHash>FakeHashKeyRADMSmith</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="USEUCOM"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="NRetUSTacCom" domain="s"/>
+			<PrincipalRef shortName="RADMSmith"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential04">
+		<!-- RADMSmith.NRetTacUsr <- USN.assignedNRet -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="RADMSmith">
+				<KeyHash>FakeHashKeyRADMSmith</KeyHash>
+			</Principal>
+			<Principal shortName="USN">
+				<KeyHash>FakeHashKeyUSN</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="USN"/>
+		</Issuer>
+		<SimpleContainment>
+			<HeadRoleTerm name="NRetTacUsr" domain="s"/>
+			<ExternalRole>
+				<PrincipalRef shortName="USN"/>
+				<RoleTerm name="assignedNRet" domain="s"/>
+			</ExternalRole>
+		</SimpleContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential05">
+		<!-- US.friendly <- SE -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="SE">
+				<KeyHash>FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="US">
+				<KeyHash>FakeHashKeyUS</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="US"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="friendly" domain="s"/>
+			<PrincipalRef shortName="SE"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+</CredentialStore>
