An AIS-provided restriction to prevent a program from accessing data in another user's segment of storage. 2. An information-system (IS) hardware-provided restriction to prevent a program from accessing data in another user's segment of storage.