A computer protection system in which each protected object has a list of all subjects authorized to access it. Compare ticket-oriented.