Mandatory security mechanisms.
• These are used to enforce multilevel security by classifying the data
and users into various security classes (or levels) and then
implementing the appropriate security policy of the organization.
– For example, a typical security policy is to permit users at a certain classification
(or clearance) level to see only the data items classified at the user’s own (or
lower) classification level. An extension of this is role-based security, which
enforces policies and privileges based on the concept of organizational roles