The virtual object space representation of actual system resources that is used for applying ACLs and POPs and for authorizing user access. See also protected object policy, protected object.