DAC

An access model where resource owners decide who gets access.

Discretionary Access Control lets the owner of a resource decide who may access it and with what rights, typically through access control lists. It is flexible and common in general-purpose operating systems, but it depends on user judgment and is vulnerable to mistakes and to malware running with the owner's privileges. It contrasts with Mandatory Access Control, where the system enforces access from labels rather than owner discretion.