ABSTRACT

If the function returns “true,” then access is granted, otherwise access is denied. It may be advantageous to consider one object and one or more possible operations on that object as one concept that is then called “permission.”