Superkey 0.8 BETTER
When confined to using binary relationships, the trinary grant relationship is replaced with an ACE (Access Control Entry) entity. This entity represents the decision to grant resource access to a particular entity. Frequently, constraints that were hidden in relationships of degree higher than two will be revealed in enititizing (reifying?) them. In this case, it makes no sense to grant GET access to the same principle for the same resrource more than once. This is revealed in the fact that principle, resource and opperation form a minimal superkey (a key that maintains uniqueness through the values of each of its attributes) for the newly created ACE entity.