An implementation of a Take-Grant protection model, which is a formal model used in the computer security field.