A rules based system enforces security policies in a data access
management system. The rules based system provides rules that preclude
certain activities, but those rules are only implemented and fired upon
certain conditions occurring. This results in certain actions being
precluded when specified conditions are true, without additional software
required to check for the condition each time the action is requested.