A configurator may nominate an attribute as calculated, meaning that the attribute can be updated in the operation mode only by a rule, but not by users. For more flexible access control to attributes the configurator may use access levels and the PROTECT action.