Maintaining ACLs for Domain Objects
Making Access Control Decisions Based on ACLs