DAC – Discretionary Access Control

is a security model that allows the owner of a resource to determine who can access and manipulate that resource.

A resource has an ACL (Access Control List), with a list of permissions to users or groups.
The usual permissions are: read, write, delete, and execute.
It is the user who decides about the permissions.
There is no central authority to manage the permissions.
Pros: Fine-grained control, simplicity, flexibility
Cons: Not suitable for large environments.