Outline for April 3, 2006

Reading: text, §2

1. Greetings and felicitations!
2. ACM and entities
   1. Subjects, objects (includes subjects), and state (S, O, A) where A is ACM
3. Transitions modify ACM entries; primitive operations
   1. enter r into A[s, o]
   2. delete r from A[s, o]
   3. create subject s′ (note A[s′, x] = A[x, s′] = ∅ for all x)
   4. create object o′ (note A[x, o′] = ∅ for all x)
   5. destroy subject s′
   6. destroy object o′
4. Commands
   1. Regular command: create•file
   2. Monooperational command: make•owner
   3. Conditional command: grant•rights
   4. Biconditional command: grant•read•file•1
   5. Regular command: grant•read•file•2
   6. General form
5. Miscellaneous ACM points
   1. Copy flag and right
   2. Own as a special right
   3. Principle of Attenuation of Privilege
6. Example: history-based ACM
7. Example: query-set-control