Access Matrix Model

The granting and revoking of privileges generally follow an Authorization Model for Discretionary Privileges known as the Access Matrix Model,
where the rows of a matrix M represent subjects (users, accounts, programs) and the columns represent objects (relations, records, columns, views, operations).

Each position M(i, j) in the matrix represents the types of privileges (read, write, update) that subject i holds on object j.