Watch this video on YouTube
Which access control model provides upper and lower bounds of access capabilities for a subject?