Through Constroid, subjects may obtain rights (see next
subsection) to operate on objects. The latter are represented
by so called data items (see Section 4.2). They are also as-
with attributes which in
uence the decision about
the rights a subject may obtain for an object. Thus, such
attributes include the ownership of data items, i.e. which
process currently owns the item, which class it belongs to,
e.g. whether it is a contact item with a set of additional
information such as name, rst name, address, etc. In general, object attributes are associated with the object itself
and express certain characteristics.