programs. Intended policy defines a valid path in which the user can
only access one program, X, through another program, P. P's behavior
uses security features or protection schemes to restrict access to X.
A "direct request" issues occurs if the user can directly access X