Goals for Protecting Objects

• Check Every Access

  • We may want to override previous authorizations
  • So every access by a user to an object should be checked

• Enforce Least Privilege

  • Grant access to ONLY those objects need to accomplish the authorized task.