Using propositional modal logic to explain access control principles, this work provides the mathematical means to comprehend, analyze, create and verify the policies and control mechanisms used to protect resources. It is suitable for those designing, implementing and verifying computer and information systems.