Subjects have full control of the objects they have. The discretionary part of 'DAC' means that the file owner has the ability to change the permissions on the file.
Uses file permissions and ACL's to restrict access based on users identity or group membership.