Key points are not available for this paper at this time.
Abstract models are given which reflect the properties of most existing mechanisms for enforcing protection or access control, together with some possible implementations. The properties of existing systems are explicated in terms of the model and implementations.
Butler Lampson (1974) studied this question.