Slide 4 of 16
Notes:
If DAV ACLs are close to the underlying system model, then they are
easier to code
Contain fewer security holes
More predictable
Easier to explain, document?