If the subject can obtain the authorization through authentication, and an authentication agent is available, then attempt to do so. Note, this means that the method used for checking authorization is likely to block for a long time.
Check access against policy even for root user.
No flags set.
Possible flags when checking authorizations.