Graham-Denning Model – uses Objects, Subjects, and Rules. It does not use create access, it has 8 rules that a specific subject can execute on an object are: Transfer Access. Grant Access. Delete Access. Read Object. Create Object. Destroy Object. Create Subject. Destroy Subject.