帮我翻译一下,好么,我一直不能真确理解它!
everything that can be given authorizations over is called an object.
Objects can be arranged in a hierarchical way using a folder-like structure
(ie: /accountingsystem/marketing/report/128
could mean the marketing expense report whose id is 128).