A kind of security access control called discretionary access control (DAC) allows or prohibits access to an item based on a policy established by the owner group and/or object's subjects.