Access control model in object-oriented systems

The authors discuss a discretionary access control model to realize secure object-oriented systems. An object is manipulated only through methods supported by the object. Classes and objects are hierarchically structured in generalization (is-a) and aggregation (part-of) relations. We discuss how to authorize and inherit access rights on classes and objects in the hierarchical structure.