Description of the illustration olsag012.gif

This illustration describes how a user's session label restricts access to a database. The default session label is C:FIN,OP:WR. There are six data rows with labels UNCLASSIFIED:FIN, UNCLASSIFIED:FIN, UNCLASSIFIED:CHEM:WR, SENSITIVE:FIN:HR, CONFIDENTIAL:OP, and TOP_SECRET:OP:WR. Because of his session label, the user only has access to UNCLASSIFIED:FIN, UNCLASSIFIED:FIN, and CONFIDENTIAL:OP.