Which design principle slates that a user has no access by default to any resource, and unless a resource is explicitly granted, it should be denied?

{} [+]