Editing WinFS (section)

===Access control===
Even though all data are shared, everything is not equally accessible. WinFS uses the [[Integrated Windows Authentication|Windows authentication system]] to provide two data protection mechanisms.<ref name="MSDNMag" /> First, there is share-level security that controls access to your WinFS share. Second, there is item level security that supports NT compatible security descriptors. The process accessing the item must have enough privileges to access it. Also in Vista there is the concept of ''"integrity level"'' for an application. Higher integrity data cannot be accessed by a lower integrity process.