Formal access control model defined in terms of application structure? | Dark Hacker News