This graphic shows the basic model for authorization checking at runtime. Each individual class checks the security policy for a particular domain, which returns the permissions for that domain.