Mandatory and Discretionary Access Control

• Mandatory access control: Decisions about access must beyond the control of the user.

• A central authority handles these decisions

• Discretionary access control: leaves a certain amount of control authority with the user.

• Examples are Unix file sharing permissions.

Notes: