because risk analysis software application 310 did not grant user 1 permission to delete application object 307, the next application object definition in the predetermined order may be checked.
Risk analysis software application 310 may check the ACL for permissions pertaining to the parent application object definition 403.