Which of the following access control types gives “UPDATE” privileges on Structured Query Language (SQL) database objects to specific users or groups?
Under MAC, who may grant a right of access that is explicitly forbidden in the access control policy?