what are the differences between discretionary and mandatory access control?
Unlike Mandatory Access Control (MAC) where access to system resources is controlled by the operating system (under the control of a system administrator), Discretionary Access Control (DAC) allows each user to control access to their own data. ... User A can, however, set access permissions on a file that she owns.