blog management program might have a control sphere that allows an "administrator" to post
new blog entries, and a separate control sphere would allow "readers" to read blog entries but
disallow them from posting new entries.
SECURITY POLICY: a specification by the product or user that defines one or more control