During a review of a design document, an analyst reads that the owner of each file decides who else may read or write it, and that a user who has been granted read access may then pass that access to a colleague. Which logical access control model does this describe?
- ADiscretionary access control, because the resource owner sets permissions and access can be delegated onward Correct
- BMandatory access control, because a central authority enforces labels that users cannot change
- CRole-based access control, because permissions follow the job function rather than the individual
- DRule-based access control, because a system rule automatically evaluates each request
Why A is correct: Correct: DAC lets the owner of an object set its permissions at their discretion, and a subject holding access can typically propagate that access to others, which is the defining behaviour described.
Why B is wrong: Tempting because MAC also governs who may read a resource, but MAC forbids owners and users from granting access; the described ability of an owner to decide and of a user to pass access on contradicts MAC entirely.
Why C is wrong: Tempting since RBAC is common, but the scenario ties permissions to an owner's personal decision about a specific file, not to a job role, so RBAC does not fit.
Why D is wrong: Tempting because a rule could permit reads, but rule-based control applies uniform system rules to all subjects rather than letting an owner personally grant and delegate access.