Predictability Goal
Ability for clients to predict access levels
Completeness
- include all administrators that could delete the file?
Evaluation must be unambiguously defined
Behaviour must be entirely consistent or discoverable
Notes:
Give example of AFS -- you can’t make somebody who is an administrator unable to access your file, even though it may appear that they do not have access.