CORBA access model
Based on a trusted ORB model: you must trust that your ORB will enforce the access policy on the server resource
The ORB determines: if this client on - behalf of this principal - can do this operation on this object
Server uses Access Control Lists (ACL) to control user access