Mandatory Access Control MAC Discretionary Access Control DAC Role-Based Access Control RBAC Rule-Based Access Control RuBAC Attribute-Based Access Control ABAC Time-of0day restrictions least privilege