Group Protection

• Authorized users are seperated into groups.

• Overcomes many of the problems of All-None

• But introduces more problems

  • Group affiliation: users cannot belong to more than one group (or group overlaps have to be dealt with)
  • Multiple personalities: users can obtain more than one account in order to belong to more than one group