/* $Id: jaas_cmd_policy1.html,v 1.2 2003/08/26 17:04:38 suhrin Exp $

   Subject-based permissions required by the Dwarf services.
*/


// grant permission to execute any console command to any user

grant principal SK.gnome.dwarf.auth.ServicePrincipal "Main Server/Console",
principal SK.gnome.dwarf.auth.UserPrincipal *
{ permission SK.gnome.dwarf.auth.ServicePermission "executeCommand.*";
};


// grant sample permissions to the AuthCmd console command

grant principal SK.gnome.dwarf.auth.ServicePrincipal "Main Server/Console/auth",
principal SK.gnome.dwarf.auth.UserPrincipal *
{ permission SK.gnome.dwarf.sample.SamplePermission "perm1";
};


grant principal SK.gnome.dwarf.auth.ServicePrincipal "Main Server/Console/auth",
principal SK.gnome.dwarf.auth.UserPrincipal "admin"
{ permission SK.gnome.dwarf.sample.SamplePermission "perm2";
  permission SK.gnome.dwarf.sample.SamplePermission "perm3";
};