Which of the following does the discretionary access control model use to identify users who have permissions to a resource?
A. Roles that users have in the organization
B. Predefined access privileges
C. Access control lists
D. Security labels
Answer: C