Discretionary Access Control

Alternative Forms

• DAC Acronym

Definitions

Definition 1

Discretionary Access Control (DAC ) An access control model whose foundation is resource ownership.

Related Terms

Quotes

Recall that the central theme of DAC is that of resource ownership. The owner of an object has the authority over who else can access that object. Information flow in DAC is therefore driven by owner-based administration of access rights. Overlooking the role of a super administrative user, generally all variations of the DAC policies share the following characteristics:

• The creator of an object, such as a file in a file system, automatically becomes the owner of that object.
• An object can be destroyed only by its owner.
• While an object is automatically owned by its creator, ownership may optionally be shared with other subjects as well.

(Benantar, 2006, p. 217)

Bibliography

• Benantar, 2006

See Also