Slide 38 of 57
Notes:
Do not need to understand policies to detect potential conflict - just detect overlap of subject, target and actions.
O- / A+ is not a conflict