DAC (Discretionary Access Control): Often used when Availability is most important. Access to an
object is assigned at the discretion of the object owner. The owner can add, remove rights, commonly
used by most OSes. Uses DACL’s (Discretionary ACL), based on user identity.