An access control model that allows owners or administrators of resources to control who can access them.