Which access control model assigns access by owner discretion?

Which access control model assigns access by owner discretion?

• A. Discretionary Access Control
• B. Mandatory Access Control
• C. Attribute-Based Access Control
• D. Role-Based Access Control

Answer: (A)

Discretionary access control is the model where the owner of a resource decides who can access it and what actions they may perform. In this approach, the owner can set and change permissions—typically using mechanisms like access control lists or capability tokens attached to the resource. This contrasts with other models: mandatory access control enforces system-wide policies set by an administrator and is not about the owner’s choices; attribute-based access control grants access based on user, resource, and environmental attributes; and role-based access control assigns permissions according to predefined roles rather than individual ownership. So, when the emphasis is on owner discretion to grant or revoke access, discretionary access control is the best fit.

Discretionary access control is the model where the owner of a resource decides who can access it and what actions they may perform. In this approach, the owner can set and change permissions—typically using mechanisms like access control lists or capability tokens attached to the resource. This contrasts with other models: mandatory access control enforces system-wide policies set by an administrator and is not about the owner’s choices; attribute-based access control grants access based on user, resource, and environmental attributes; and role-based access control assigns permissions according to predefined roles rather than individual ownership. So, when the emphasis is on owner discretion to grant or revoke access, discretionary access control is the best fit.