There's a working draft of X.501-199x at: ftp://ftp.bull.com/pub/OSIdirectory/ITUnov96/X.501/97x501Rev0.doc Section 15 is the basic access control model from the 1992 standards; Section 16 is the simplified model; Section 17 is the (new) rule-based model. Regards, Rich