3.1 Architecture Access Control Models Process & resource (subject & object) ACL database Hooks (Decision Center) Log Box Administration Interface Interact with the ACL database