Recognizing immediacy in an N-tree hierarchy and its application to protection groups

The benefits of providing access control with groups of users as the unit of granularity are enhanced if the groups are organized in a hierarchy (partial order) by the subgroup relation >