Figure 3-2
This illustration describes how a user's session label restricts access
to a database. The default session label is C:FIN,OP:WR. There are
six data rows with labels UNCLASSIFIED:FIN, UNCLASSIFIED:FIN,
UNCLASSIFIED:CHEM:WR, SENSITIVE:FIN:HR, CONFIDENTIAL:OP,
and TOP_SECRET:OP:WR. Because of his session label, the user only
has access to UNCLASSIFIED:FIN, UNCLASSIFIED:FIN, and CONFIDENTIAL:OP.