A security system for providing monitoring of objects and persons is
described. Person identifiers are assigned to, and generally carried by,
the persons, where each person identifier is associated with at least one
user role. Similarly, object identifiers are assigned to the objects,
where each object identifier is assigned to at least one object class. An
identification interrogator identifies the object and person identifiers
within an area, and a rule generator determines rules defining which
persons of which user roles, together with which objects of which object
classes are, allowed and/or required within the area.