Arturo is a network engineer. He wants to implement an access control system in which the owner of the resource decides who can change permissions, and permission levels can be granted to specific users, groups of people in the same or similar job roles, or by project. Which of the following should Arturo choose?

Question $1$ options:

Discretionary access control $($DAC$)$

Mandatory access control $($MAC$)$

Nondiscretionary access control

Access control lists