Access Control

• One Method: Deny access to password file

• Systems susceptible to unanticipated break-ins

• An accident in protection may render the password file readable compromising all accounts

• Users have accounts in other protection domains using the same passwords