Graham-Denning Model – uses Objects, Subjects, and Rules. It does not use read subjects, it has 8
rules that a specific subject can execute on an object are: Transfer Access. Grant Access. Delete
Access. Read Object. Create Object. Destroy Object. Create Subject. Destroy Subject.