# Copyright (c) 1999, 2000 The University of Utah and the Flux Group.
# All rights reserved.
# 
# Contributed by the Computer Security Research division,
# INFOSEC Research and Technology Office, NSA.
# 
# This file is part of the Flux OSKit.  The OSKit is free software, also known
# as "open source;" you can redistribute it and/or modify it under the terms
# of the GNU General Public License (GPL), version 2, as published by the Free
# Software Foundation (FSF).  To explore alternate licensing terms, contact
# the University of Utah at csl-dist@cs.utah.edu or +1-801-585-3271.
# 
# The OSKit is distributed in the hope that it will be useful, but WITHOUT ANY
# WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
# FOR A PARTICULAR PURPOSE.  See the GPL for more details.  You should have
# received a copy of the GPL along with the OSKit; see the file COPYING.  If
# not, write to the FSF, 59 Temple Place #330, Boston, MA 02111-1307, USA.

#
# Define the set of allowed roles and MLS ranges for each user
#
# user username roles role_set ranges range_set ;

user nobody roles { system_r user_r } ranges u-ts;

user root roles { startup_r admin_r user_r } ranges u-ts;

user hospital_user roles { user_r hospital_doctor_r hospital_nurse_r hospital_admin_r hospital_accounting_r hospital_insurance_r } ranges u-ts;

user pal roles { user_r branch_employee_r hospital_doctor_r hospital_nurse_r hospital_admin_r hospital_accounting_r hospital_insurance_r } ranges u-ts;

user sds roles { user_r branch_employee_r hospital_doctor_r hospital_nurse_r hospital_admin_r hospital_accounting_r hospital_insurance_r } ranges u-ts;

user rct roles { user_r branch_employee_r hospital_doctor_r hospital_nurse_r hospital_admin_r hospital_accounting_r hospital_insurance_r } ranges u-ts;