Class(sec:_HostOnIntranet complete restriction(sec:hasAsset allValuesFrom(sec:HostOnIntranet)) sec:HasAsset)