An unprivileged user issued a command which produced the following log message:

avc: denied { getattr } for pid=984 exe=/usr/bin/vim path=/etc/shadow dev=03:01 ino=134343 scontext=hugh:user_r:user_t tcontext=system_u:object:shadow_t tclass=file

What does the message mean?