| (* |
| * Licensed to the Apache Software Foundation (ASF) under one |
| * or more contributor license agreements. See the NOTICE file |
| * distributed with this work for additional information |
| * regarding copyright ownership. The ASF licenses this file |
| * to you under the Apache License, Version 2.0 (the |
| * "License"); you may not use this file except in compliance |
| * with the License. You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, |
| * software distributed under the License is distributed on an |
| * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY |
| * KIND, either express or implied. See the License for the |
| * specific language governing permissions and limitations |
| * under the License. |
| *) |
| |
| theory ModelConf |
| imports Main FMT_MSA |
| begin |
| |
| locale ModelConf=SubjAttrConf nouid valid_uid nogid valid_gid noiid valid_iid |
| trusted untrusted is_trusted device normal is_normal data |
| func is_data noresrcattr resrc_attr resrcattr_presrcid |
| resrcattr_infoid resrcattr_trustlevel resrcattr_presrctype |
| resrcattr_infotype nousrattr usr_attr usrattr_id |
| nousrattrconf usrattr_conf is_usrattrconf find_usrid |
| delete_usrattr get_usrattr valid_usrattrconf nosubjattr |
| subj_attr subjattr_callerattr subjattr_participants |
| subjattr_resrcattr nosubjattrconf subjattr_conf |
| is_subjattrconf subjattr_subjid find_subjid delete_subjattr |
| get_subjattr subjattrconf_uniq valid_subjattrconf + |
| ObjAttrConf nogid valid_gid noiid valid_iid trusted untrusted |
| is_trusted device normal is_normal data func is_data |
| noresrcattr resrc_attr resrcattr_presrcid resrcattr_infoid |
| resrcattr_trustlevel resrcattr_presrctype resrcattr_infotype |
| nouid valid_uid nousrattr usr_attr usrattr_id nousrattrconf |
| usrattr_conf is_usrattrconf find_usrid delete_usrattr |
| get_usrattr valid_usrattrconf noobjattr obj_attr |
| objattr_owners objattr_resrcattr noobjattrconf objattr_conf |
| is_objattrconf objattr_objid find_objid delete_objattr |
| get_objattr valid_objattrconf + |
| AttrConfDisj nogid nosubjattr nosubjattrconf subjattr_conf is_subjattrconf |
| subjattr_subjid find_subjid delete_subjattr get_subjattr |
| subjattrconf_uniq noobjattr noobjattrconf objattr_conf |
| is_objattrconf objattr_objid find_objid delete_objattr |
| get_objattr valid_objattrconf rel_disjoint |
| for nouid::'uid |
| and valid_uid::"'uid\<Rightarrow>bool" |
| and nogid::"'gid" |
| and valid_gid::"'gid\<Rightarrow>bool" |
| and noiid::"'iid" |
| and valid_iid::"'iid\<Rightarrow>bool" |
| and trusted::"'trustlevel" |
| and untrusted::"'trustlevel" |
| and is_trusted::"'trustlevel\<Rightarrow>bool" |
| and device::"'presrctype" |
| and normal::"'presrctype" |
| and is_normal::"'presrctype\<Rightarrow>bool" |
| and data::"'infotype" |
| and func::"'infotype" |
| and is_data::"'infotype\<Rightarrow>bool" |
| and noresrcattr::'resrcattr |
| and resrc_attr::"'gid\<Rightarrow>'iid\<Rightarrow>'trustlevel\<Rightarrow>'presrctype\<Rightarrow>'infotype\<Rightarrow>'resrcattr" |
| and resrcattr_presrcid::"'resrcattr\<Rightarrow>'gid" |
| and resrcattr_infoid::"'resrcattr\<Rightarrow>'iid" |
| and resrcattr_trustlevel::"'resrcattr\<Rightarrow>'trustlevel" |
| and resrcattr_presrctype::"'resrcattr\<Rightarrow>'presrctype" |
| and resrcattr_infotype::"'resrcattr\<Rightarrow>'infotype" |
| and nousrattr::'usrattr |
| and usr_attr::"'uid\<Rightarrow>'usrattr" |
| and usrattr_id::"'usrattr\<Rightarrow>'uid" |
| and nousrattrconf::"'usrattrconf" |
| and usrattr_conf::"'usrattrconf\<Rightarrow>'usrattr\<Rightarrow>'usrattrconf" |
| and is_usrattrconf::"'usrattrconf\<Rightarrow>bool" |
| and find_usrid::"'usrattrconf\<Rightarrow>'usrattr\<Rightarrow>bool" |
| and delete_usrattr::"'usrattrconf\<Rightarrow>'usrattr\<Rightarrow>'usrattrconf" |
| and get_usrattr::"'usrattrconf\<Rightarrow>'uid\<Rightarrow>'usrattr" |
| and valid_usrattrconf::"'usrattrconf\<Rightarrow>bool" |
| and nosubjattr::'subjattr |
| and subj_attr::"'usrattr\<Rightarrow>'usrattrconf\<Rightarrow>'resrcattr\<Rightarrow>'subjattr" |
| and subjattr_callerattr::"'subjattr\<Rightarrow>'usrattr" |
| and subjattr_participants::"'subjattr\<Rightarrow>'usrattrconf" |
| and subjattr_resrcattr::"'subjattr\<Rightarrow>'resrcattr" |
| and nosubjattrconf::"'subjattrconf" |
| and subjattr_conf::"'subjattrconf\<Rightarrow>'subjattr\<Rightarrow>'subjattrconf" |
| and is_subjattrconf::"'subjattrconf\<Rightarrow>bool" |
| and subjattr_subjid::"'subjattr\<Rightarrow>'gid" |
| and find_subjid::"'subjattrconf\<Rightarrow>'subjattr\<Rightarrow>bool" |
| and delete_subjattr::"'subjattrconf\<Rightarrow>'subjattr\<Rightarrow>'subjattrconf" |
| and get_subjattr::"'subjattrconf\<Rightarrow>'gid\<Rightarrow>'subjattr" |
| and subjattrconf_uniq::"'subjattrconf\<Rightarrow>bool" |
| and valid_subjattrconf::"'subjattrconf\<Rightarrow>bool" |
| and noobjattr::'objattr |
| and obj_attr::"'usrattrconf\<Rightarrow>'resrcattr\<Rightarrow>'objattr" |
| and objattr_owners::"'objattr\<Rightarrow>'usrattrconf" |
| and objattr_resrcattr::"'objattr\<Rightarrow>'resrcattr" |
| and noobjattrconf::"'objattrconf" |
| and objattr_conf::"'objattrconf\<Rightarrow>'objattr\<Rightarrow>'objattrconf" |
| and is_objattrconf::"'objattrconf\<Rightarrow>bool" |
| and objattr_objid::"'objattr\<Rightarrow>'gid" |
| and find_objid::"'objattrconf\<Rightarrow>'objattr\<Rightarrow>bool" |
| and delete_objattr::"'objattrconf\<Rightarrow>'objattr\<Rightarrow>'objattrconf" |
| and get_objattr::"'objattrconf\<Rightarrow>'gid\<Rightarrow>'objattr" |
| and valid_objattrconf::"'objattrconf\<Rightarrow>bool" |
| and rel_disjoint::"'subjattrconf\<Rightarrow>'objattrconf\<Rightarrow>bool"+ |
| fixes nomodelconf::'modelconf |
| and model_conf::"'subjattrconf\<Rightarrow>'objattrconf\<Rightarrow>'modelconf" |
| and modelconf_subj::"'modelconf\<Rightarrow>'subjattrconf" |
| and modelconf_obj::"'modelconf\<Rightarrow>'objattrconf" |
| and valid_modelconf::"'modelconf\<Rightarrow>bool" |
| assumes MODELCONFHLR1:"modelconf_subj nomodelconf=nosubjattrconf" |
| assumes MODELCONFHLR2:"modelconf_obj nomodelconf=noobjattrconf" |
| assumes MODELCONFHLR3:"\<not>valid_modelconf nomodelconf" |
| assumes MODELCONFHLR4:"modelconf_subj(model_conf sconf oconf)=sconf" |
| assumes MODELCONFHLR5:"modelconf_obj(model_conf sconf oconf)=oconf" |
| assumes MODELCONFHLR6:"\<exists>sconf oconf. x=model_conf sconf oconf\<or>x=nomodelconf" |
| assumes MODELCONFHLR7:"rel_disjoint sconf oconf\<and> |
| valid_subjattrconf sconf\<and> |
| valid_objattrconf oconf\<Longrightarrow> |
| valid_modelconf(model_conf sconf oconf)" |
| assumes MODELCONFHLR8:"\<not>rel_disjoint sconf oconf\<and> |
| valid_subjattrconf sconf\<and> |
| valid_objattrconf oconf\<Longrightarrow> |
| \<not>valid_modelconf(model_conf sconf oconf)" |
| assumes MODELCONFHLR9:"rel_disjoint sconf oconf\<and> |
| \<not>valid_subjattrconf sconf\<and> |
| valid_objattrconf oconf\<Longrightarrow> |
| \<not>valid_modelconf(model_conf sconf oconf)" |
| assumes MODELCONFHLR10:"rel_disjoint sconf oconf\<and> |
| valid_subjattrconf sconf\<and> |
| \<not>valid_objattrconf oconf\<Longrightarrow> |
| \<not>valid_modelconf(model_conf sconf oconf)" |
| begin |
| |
| lemma MODELCONFHLR11:"x\<noteq>nomodelconf\<Longrightarrow>\<exists>sconf oconf. x=model_conf sconf oconf" |
| proof - |
| fix x |
| assume 0:"x\<noteq>nomodelconf" |
| from MODELCONFHLR6 0 show "\<exists>sconf oconf. x = model_conf sconf oconf" by blast |
| qed |
| |
| end |
| |
| print_locale! ModelConf |
| |
| end |
