methods and apparatus , including computer program products , implementing and using techniques for providing an access control list for an object in a computer system . a list of one or more subjects is defined . each of the subjects is associated with a set of operations that the subject can perform on the object . a set of rules is defined that specify conditions at which a different set of operations is to be associated with one or more of the subjects in the list of subjects . an access control list is also described .