pmi_description.txt

一个完整的XACML工程,学习XACML技术的好例子!

ditec_soa.policy.ace - contains a policy ditec.policy.xml, described in 
	ditec.policy.html

antonio.ace - Antonio Gomez-Skarmeta
	Subject DN: cn=Antonio Gomez-Skarmeta,ou=Professor,ou=DIIC,ou=Computer Science,o=University of Murcia,c=ES
	Issuer DN: cn=University SOA,o=University of Murcia,c=ES
	Roles: DIIC-Professor
	Validity: 2004-06-11 ... 2004-08-27

	Subject Domains: SD_DIIC_ID, SD_Professor_ID, 
			SD_Researcher_ID, SD_Staff_ID
	SOA: University_SOA
	Roles: DIIC-Professor, Professor, Researcher, Staff
	Validity: should not be older than 1 month when starting the session
		(effectively, thrown away until the session starts on 2004-07-27)
	Can do: open-door on Main-Door or Back-Door
		clock-in or clock-out on Main-Door

gabriel.ace - Gabriel
	Subject DN: cn=Gabriel,ou=Collaborator,ou=DIIC,ou=Computer Science,o=University of Murcia,c=ES
	Issuer DN: cn=DIIC SOA,ou=Computer Science,o=University of Murcia,c=ES
	Roles: SEINIT-Project
	Validity: 2004-06-11 ... 2004-08-27

	Subject Domains: SD_Researcher_ID, SD_Staff_ID
	SOA: DIIC_SOA
	Roles: Researcher, Staff (SEINIT-Project is not trusted)
	Validity: constrained to 2004-06-15 ... 2004-08-27
	Can do: open-door on Main-Door or Back-Door
		clock-in or clock-out on Main-Door

leter.ace - Leter
	Subject DN: cn=Leter,ou=Maintenance,o=University of Murcia,c=ES
	Issuer DN: cn=University SOA,o=University of Murcia,c=ES
	Roles: Maintenance-Engineer
	Validity: 2004-06-11 ... 2004-08-27

	Subject Domains: SD_Maintenance_ID, SD_Staff_ID
	SOA: University_SOA
	Roles: Maintenance-Engineer, Staff
	Validity: a session should not last for more than 15 days
	Can do: open-door on Main-Door or Back-Door
		clock-in or clock-out on Main-Door
		lighting on Back-Door, DIIC-Lab-Door and  DITEC-Lab-Door

manuel.ace - Manuel
	Subject DN: cn=Manuel,ou=Collaborator,ou=DITEC,ou=Computer Science,o=University of Murcia,c=ES
	Issuer DN: cn=DITEC SOA,ou=Computer Science,o=University of Murcia,c=ES
	Roles: PIRAMIDE-Project
	Validity: 2004-06-11 ... 2004-08-27

	Subject Domains: SD_Researcher_ID, SD_Staff_ID
	SOA: DITEC_SOA
	Roles: Researcher, Staff (PIRAMIDE-Project is not trusted)
	Validity: constrained to 2004-06-15 ... 2004-08-27
	Can do: open-door on Main-Door or Back-Door
		clock-in or clock-out on Main-Door

oscar.ace - Oscar Canovas
	Subject DN: cn=Oscar Canovas,ou=Professor,ou=DITEC,ou=Computer Science,o=University of Murcia,c=ES
	Issuer DN: cn=University SOA,o=University of Murcia,c=ES
	Roles: DITEC-Professor
	Validity: 2004-06-11 ... 2004-08-27

	Subject Domains: SD_DITEC_ID, SD_Professor_ID, 
			SD_Researcher_ID, SD_Staff_ID
	SOA: University_SOA
	Roles: DITEC-Professor, Professor, Researcher, Staff
	Validity: constrained to 2004-06-15 ... 2004-08-27
	Can do: open-door on Main-Door or Back-Door
		clock-in or clock-out on Main-Door