Editing Discretionary access control (section)

=== With owner ===
The term DAC is commonly used in contexts that assume that every object has an ''owner'' that controls the permissions to access the object, probably because many systems do implement DAC using the concept of an owner. But the TCSEC definition does not say anything about owners, so technically an access control system doesn't have to have a concept of ownership to meet the TCSEC definition of DAC.

Users (owners) have under this DAC implementation the ability to make policy decisions and/or assign security attributes. A straightforward example is the [[Filesystem_permissions#Traditional_Unix_permissions|Unix file mode]] which represent write, read, and execute in each of the 3 bits for each of User, Group and Others. (It is prepended by another bit that indicates additional characteristics).