In 1972, G.S. Graham and P.J. Denning, developed the Graham-Denning Model that shows how subjects and objects should be securely managed to include creation and deletion. It also addresses how to assign specific access rights. The model is set up based on subject, object, and rules that tie in both. The Graham-Denning model resolves the security questions related to defining a set of specific rights on “how particular subjects can execute security functions on an object.” (Pfleeger & Pfleeger, 2003) The eight access rights include the creation and deletion of object, subject and access rights for read, grant, delete, and transfer. The area that was limiting within this model was associated with the defining a system of protection. This