In Internet communications, a group of protection subdirectives that work together to define how the server should control access to the resources being protected.