Access to network resources need to be handled securely by using Access Control Model these models help
to enforce the principle of least privilege concept that was mentioned in the last video.
DISCRETIONARY ACCESS CONTROL defines who can read or write to a resource based on the owner's discretion.
For example when an admin creates a sharepoint site with secure file resources they can decide who has
access to the site based on user group memberships to enforce access control.
A more scalable method of securing access to resources is Mandatory Access Control with Mandatory Access
Control.
The system itself controls who access is resources so you are not relying on the user that created the
resource to permit access
nondiscretionary access control can be referred to as rule based access control or our back meaning
that access to an object is based on certain rules.
For example a salesman would have access to sales files while the user maintains the role of a salesman
but would lose privileges to sales files if they were moved to the marketing department.
So a user's role defines the access control rules.