. "are logically separated into computer and user types and applied to the policy" . . . .