 "By decoupling the right to access information from the right to disseminate it, the flow model goes beyond the access matrix model in its ability to specify secure information flow.A practical system needs both access and flow control to satisfy all security requirements.