Rights are privileges that can be assigned to a subject
to perform operations on an object. Constroid,
supports the basic rights create, read, update, and delete
(CRUD). They are enforced when accessing the data stored
in secondary memory. This basic set can be extended to API functions if feasible mechanisms would be integrated into the VM. Rights are assigned to a subject using
the decision function. It uses subject and object attributes
as well as authorisations, obligations, and conditions to determine the set of appropriate rights.