AC-3(4)

Enforce over the set of covered subjects and objects specified in the policy, and where the policy specifies that a subject that has been granted access to在政策所规定的覆盖主题和对象集合内执行，并确保在政策中指定的已获授权访问权限的主题得以实施。