Principles of Mandatory vs Discretionary Control

Differentiate between user-definable permissions and policy-enforced kernel-level access constraints.