Lets say Paul, is cleared for (TOP SECRET, {A,C}) where top secret is his clearance and A & C privledges. He wants to access a Document classified (Secret,{B,C})..
Top secret trumps Secret but in order for paul to "dominate" the documents permissions must be a subset of pauls. Which B,C is not a subset of A,C.
So my question is does paul HAVE to dominate the document in order to access it period? Ive read that dominate only provides a heirarchy of sorts. The BLP model sys read downs is allowed so im a little confused about this situation.