discretionary access control list An access control list that is controlled by the owner of an object and that specifies the access particular users or groups can have to the object