1. A method for identifying subject-executed code and subject-granted access rights within a program, the method further comprising the steps of: constructing a static model of a program, wherein the static model comprises: an invocation graph, the invocation graph comprising a set of nodes and a set of edges, the invocation graph being configured to visually represent programming methods as nodes, and the calling context that is associated with a respective programming method; and a points-to graph, the points-to graph being configured to model the dependencies that exist between program objects; determining a set of access rights that are associated with each subject object that is comprised within the program; annotating the invocation graph with the set of access right data to generate a subject-rights analysis, wherein each node comprised within the invocation graph is mapped to a set of access rights that represent subject-granted access rights under which a method that corresponds to a respective node will be executed; and utilizing the subject-rights analysis to perform a subject-rights analysis of the program.