Figure: The access control domain