Associated with a controlled object. Determines if an operation invoked on a controlled object should be allowed based on the transaction of the operation.