An access control system that permits specific entities (people, processes, devices) to access system resources according to permissions for each particular entity. Contrast with mandatory access ...