modifying the intended structure of the resulting web page.
Access control is a commonly-used protection mechanism, but a wide variety of
mechanisms exist. A simplified model may assist in describing mechanism-independent
failures.