object oriented security