The University of SydneyPage 24Bell-La Padula–The Model can be extended to other primitive operations–Execute (e) : neither observe nor alter–Read (r) : observe, but do not alter–Append (a) : alter but do not observe–Write (w) : observe and alter–Represented as Subject, Object and access attribute–Access permission matrix–Allows for discretionary access control–Places objects vs. subjects in a matrixOxOyOzS1er, weS2r, weaS3a, wr, aeSubjectsObjectsOperations S1can perform on Oz