Index: fedd/abac-src/ttg/demo/build/WEB-INF/se.xml
===================================================================
--- fedd/abac-src/ttg/demo/build/WEB-INF/se.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/build/WEB-INF/se.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,167 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<CredentialStore xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="file:///var/tomcat4/webapps/demp/WEB-INF/RTMLv1.0q.xsd">
+	<ApplicationDomainSpecification uri="" id="FakeHashADSD01">
+		<RoleDeclaration name="friendly">
+			<Plain issuerTraces="all" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="getsSLocs">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="needsSLocs">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacCom">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="usr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacUsr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetUSTacCom">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="assignedNRet">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="friendlyUsr">
+			<Plain issuerTraces="all" subjectTraces="none"/>
+		</RoleDeclaration>
+	</ApplicationDomainSpecification>
+	<Credential id="FakeHashCredential01">
+		<!-- SE.usr <- SAdmir-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SE"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="usr" domain="s"/>
+			<PrincipalRef shortName="SAdmir"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential02">
+		<!-- SE.friendly <- US -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="US">
+				<KeyHash>FakeHashKeyUS</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SE"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="friendly" domain="s"/>
+			<PrincipalRef shortName="US"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential03">
+		<!-- SAdmir.needsSLocs <- Sadmir.NRetTacCom.NRetTacUsr-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<LinkedContainment>
+			<HeadRoleTerm name="needsSLocs" domain="s"/>
+			<LinkedRole>
+				<RoleTerm name="NRetTacCom" domain="s"/>
+				<RoleTerm name="NRetTacUsr" domain="s"/>
+			</LinkedRole>
+		</LinkedContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential04">
+		<!-- SAdmir.NRetTacCom <- USEUCOM.NRetUSTacCom-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+			<Principal shortName="USEUCOM">
+				<KeyHash>FakeHashKeyUSEUCOM</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<SimpleContainment>
+			<HeadRoleTerm name="NRetTacCom" domain="s"/>
+			<ExternalRole>
+				<PrincipalRef shortName="USEUCOM"/>
+				<RoleTerm name="NRetUSTacCom" domain="s"/>
+			</ExternalRole>
+		</SimpleContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential05">
+		<!-- SAdmir.getsSLocs <- SE.friendly.usr ^ SAdmir.needsSLocs-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<SimpleContainment>
+			<HeadRoleTerm name="friendly" domain="s"/>
+			<ExternalRole>
+				<PrincipalRef shortName="SE"/>
+				<RoleTerm name="friendly" domain="s"/>
+			</ExternalRole>
+		</SimpleContainment>
+		<LinkedContainment>
+			<HeadRoleTerm name="friendlyUsr" domain="s"/>
+			<LinkedRole>
+				<RoleTerm name="friendly" domain="s"/>
+				<RoleTerm name="usr" domain="s"/>
+			</LinkedRole>
+		</LinkedContainment>
+		<IntersectionContainment>
+			<HeadRoleTerm name="getsSLocs" domain="s"/>
+			<Intersection>
+				<RoleTerm name="friendlyUsr" domain="s"/>
+				<RoleTerm name="needsSLocs" domain="s"/>
+			</Intersection>
+		</IntersectionContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+</CredentialStore>
