The University of SydneyPage 16Mechanisms for building a model–Objects: What to project? documents, files, directories, databases, transactions, etc. –Subjects: Who to control? users, entities, processes, etc. that interact with objects. –Actions: What to control? operations, actions, that can operate on objects and must be controlled.
Security policy –“ which subjects can perform which actions on which objects”