A means of restricting access based upon the sensitivity (as represented by a label) of the resource and the formal authorization (i.e., clearance) of persons to access resources of such sensitivity.