(user, process, or device) is granted the most restrictive set of privileges
needed for the performance of each of its authorized tasks. A more
recent corollary is least-authorization, which is less transactional.
u Complete Mediation—Before granting access to a resource or execution