Watch this video on YouTube
Which access model has the concept of trusted subjects who are the only ones permitted to perform certain actions on particular objects?