•Discretionary Access
Control (DAC, IBAC)
–individual user sets access control mechanism to allow or deny
access to an object
•Mandatory Access Control
(MAC)
–system mechanism controls access to object, and individual
cannot alter that access
•Originator Controlled
Access Control (ORCON)
originator (creator) of
information controls who can access informationQuestion
•Policy disallows cheating
–Includes copying homework, with or without permission
•CS class has students do
homework on computer
•Anne forgets to
read-protect her homework file
•Bill copies it
•Who cheated?
–Anne, Bill, or both?
