<Ul> <Li> S = Subject = A person or automated agent </Li> <Li> R = Role = Job function or title which defines an authority level </Li> <Li> P = Permissions = An approval of a mode of access to a resource </Li> <Li> SE = Session = A mapping involving S, R and / or P </Li> <Li> SA = Subject Assignment </Li> <Li> PA = Permission Assignment </Li> <Li> RH = Partially ordered Role Hierarchy . RH can also be written: ≥ (The notation: x ≥ y means that x inherits the permissions of y .) <Ul> <Li> A subject can have multiple roles . </Li> <Li> A role can have multiple subjects . </Li> <Li> A role can have many permissions . </Li> <Li> A permission can be assigned to many roles . </Li> <Li> An operation can be assigned many permissions . </Li> <Li> A permission can be assigned to many operations . </Li> </Ul> </Li> </Ul> <Li> S = Subject = A person or automated agent </Li> <Li> R = Role = Job function or title which defines an authority level </Li> <Li> P = Permissions = An approval of a mode of access to a resource </Li>

What does the mandatory access control (mac) method used to control access