A access control model that uses attributes associated with users, objects, or environments to determine access permissions.