Slide 14 of 14
Notes:
Predictability is impossible. Access could be denied because
- server could deny access to users who haven’t paid
- implementations could extend permissions model
- Administrators could have special permissions outside the ACL system