https://DevOpsCloud.io -- Cloud Monk Losang Jinpa, Ph.D., MCSE/MCT, GitOps DevOps Engineer

Discretionary Access Control (DAC) is a security model that allows resource owners to make decisions about who can access their resources and under what conditions. Unlike Mandatory Access Control (MAC), DAC grants users the ability to set permissions for their own resources, providing a more flexible approach to access control.

• User Control: In DAC, the owner of a resource (such as a file or directory) has the discretion to determine who can access it and what actions they can perform. This allows users to grant or deny access based on their needs and preferences.
• Access Permissions: DAC systems typically use access control lists (ACLs) or similar mechanisms to specify permissions. These lists define which users or groups have access to specific resources and the types of operations they are allowed to perform, such as read, write, or execute.
• Flexibility: DAC provides flexibility and ease of use, making it suitable for environments where users need to collaborate and share resources. It allows for quick adjustments to permissions without requiring centralized control.

• Business and Collaborative Environments: DAC is commonly used in business environments where users need to collaborate and share files. It enables resource owners to manage access permissions in a way that facilitates teamwork while maintaining control over their resources.
• File Systems and Databases: Many file systems and database management systems implement DAC to manage access to files and data. Users can control who can access their files or records, offering a degree of customization and control.

• Security Risks: DAC can pose security risks if users inadvertently or intentionally grant access to unauthorized individuals. Because permissions are set by users, there is a potential for misconfiguration and unauthorized access.
• Administrative Complexity: Managing access permissions in a large environment can become complex, particularly when users frequently change or share resources. Administrators may need to implement additional policies or tools to manage and audit permissions effectively.

• https://en.wikipedia.org/wiki/Discretionary_access_control
• https://www.techopedia.com/definition/26811/discretionary-access-control-dac
• https://www.csoonline.com/article/320323/what-is-discretionary-access-control-dac-and-how-does-it-work.html