Owner of the object controls who can access the object (more liberal policy)Weakness of DACControlling information propagation is more difficultResource owners can fail