Watch this video on YouTube
Which access control model allows the owner of the resource to determine who has access permissions?