In computer security Mandatory Access Control (MAC) is a type of
access control in which only the administrator
manages the access controls. The administrator defines the usage and access
policy, which cannot be modified or changed by users, and the policy will
indicate who has access to which programs and files. MAC is most often used in
systems where priority is placed on confidentiality.
Contrast with Discretionary
Access Control (DAC) which is determined by the user with permission.