Construct an access control matrix for the subjects and objects of Lipner\'s com
ID: 673719 • Letter: C
Question
Construct an access control matrix for the subjects and objects of Lipner's commercial model. The
matrix will have entries for r (read) and w (write) rights. Show that this matrix is consistent with the
requirements listed in below
Users will not write their own programs, but will use existing production programs and databases.
Programmers will develop and test programs on a nonproduction system; if they need access to actual
data, they will be given production data via a special process, but will use it on their development system.
A special process must be followed to install a program from the development system onto the production
system.
The special process in requirement 3 must be controlled and audited.
The managers and auditors must have access to both the system state and the system logs that are
generated.
Explanation / Answer
System Development (system programs under