positive2.spec 780 Bytes
Newer Older
1 2
/* This test is to show that unique role names can be used, they must only contain [0-9a-zA-Z]+
 * 
3
 * This shows that NOT can have white space between it and the tilde (~)
4 5 6 7 8 9 10 11 12 13 14 15 16
*/

CanAssign {
    <manager,t0-t5,TRUE,[t1,t1],employee>		                    			//(1)
    <officer,t0-t0,employee & NOT~ manager & NOT~ badguy,[t1,t2],contractor>	//(2)
}

CanRevoke {
    // same as above
}

CanEnable {
    <manager,t0-t5,TRUE,[t1,t1],employee>		                    			//(3)
17
    <officer,t0-t0,employee & NOT ~ manager & NOT ~badguy,[t1,t2],contractor>	//(4)
18 19 20 21
}

CanDisable {
    <manager,t0-t5,TRUE,[t1,t1],employee>		                    			//(5)
22
    <officer,t0-t0,employee & NOT ~manager & NOT ~ badguy,[t1,t2],contractor>	//(6)
23 24
}

25 26
Query: t0,[officer,manager,employee]
Expected: UNKNOWN