Changes between Version 7 and Version 8 of AuthImpl

Author:

gtw (IP: 155.98.60.98)

Timestamp:

02/06/09 15:07:32 (2 years ago)

Comment:

Use privileges from the CFA in the example, and refer to delegation instructions.

AuthImpl

@@ -136 +136 @@
- Joe's GID
- MySlice GID
-delete:1, modify
+control:1, instantiate
-A digital signature over credential #1
-}}}
-may delete or modify
+has "control" and "instantiate" permission over
-delegate those privileges to someone else. The digital signature prevents any modification
-of the credential, verifiable back to the trusted root certificate of the Slice Authority
- Mary's GID
- MySlice GID
-modify
+instantiate
- (ID #1
-  Joe's GID
-  MySlice GID
-delete:1, modify
+control:1, instantiate
-A digital signature over credential #1
-A digital signature over credential #2
-}}}
-modify the slice, but not delete
+instantiate the slice, but not control
-cannot be further delegated since there are no privileges specified with the delegate bit
-set. The second digital signature covers the new credential (referenceduby ID!#2), which
-have been passed along. If this check passes, then the credential is considered valid.
-
-not operational yet, but it being worked on. Check back
-
+operational in sufficiently recent CVS revisions, and is being actively worked on.
+
-
-=== CRLS ===