Figure 2: Access checking using isAccessAllowed

                     
                                   contextName
 securityModel                     |
    |     |                        |     securityLevel
    |     |    securityName        |          |
    |     |       |                |          |
    |     |       |                |          |
    |    \|/     \|/              \|/         |
    |  ---------------     -----------------  |
    |  | Group Table |     | Context Table |  |
    |  ---------------     -----------------  |
    |         |                    |          |
    |     groupName           contextName     |
    |         |                    |          |
    |         |                    |          |
    |         -------------------  |  ---------
    |                           |  |  |
    --------------------------  |  |  |
                             |  |  |  |      variableName
                            \|/\|/\|/\|/        (OID)
                          ----------------        |
                          | Access Table |        |
                          ----------------        |
                                 |                |
                              viewName            |
                                 |                |
                                 |                |
                                 |   --------------
                                 |   |
                                \|/ \|/
                             --------------
                             | View Table |
                             --------------
                                   |
                                   |
                                  \|/
                       ACCESS IS GRANTED OR DENIED!