If processes in domain D are allowed to read and update, but not create an object O$,$ what would the corresponding access$-$right look like on the access matrix implemented as a global table, access lists for objects, and capacity lists for domains, respectively?