This paper explains what protection and access control is all about in a form that is general enough to make it possible to understand all the forms that we see an existing systems, and perhaps to see more clearly than we can now the relationships among them. These different mechanisms are mostly independent, and superficially they look almost completely different. However, it turns out that there is a fair amount of unity at the basic conceptual level in the way in which protection is done.