vmware C2 secuirty

Under the level C2 security classification, what does “discretionary access control” mean?