cando(as, s, o, 〈sign〉a)← L1&..&Ln, Li ∈ F dercando(as, s, o, 〈sign〉a)← L1&..&Ln, Li ∈F ∪ cando decide(as, sa, s, o, 〈sign〉a)← L1&..&Ln, Li ∈F ∪ cando ∪ dercando do(as, s, o, 〈sign〉a)← L1&..&Ln, Li ∈F ∪ cando [...] of host h is l. Definition 4 (related locations) The binary predicate locationin(l1, l2) holds iff l1, l2 ∈ LT , and l1 <L l2 according to the relation defined over locations. In our modular access control [...] hierarchy Definition 11 (security relation) The binary predicate more secure(sl1, sl2) holds iff sl1, sl2 ∈ SLT , and s1 >SL sl2 according to the relation defined over security levels. We assume that most …