Compound Objects – Access Control

• Access to child object is controlled by flag in parent compound object

• Access to child object data is controlled by normal taint checks within the child object