Formal access control model defined in terms of application structure?security.stackexchange.com1 pointjimwhitson14 years ago