This paper presented a flexible, object-oriented and declarative access control policy, its decision-making algorithm and enforcement framework.

• 摘要提出了一种声明式的、面向对象的、灵活访问控制策略的形式化描述、决策算法和实施框架。