Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.
Sign up to join this community
A very simple access model: I have users and resources. Each resource has an owner. Owners can can grant other users read and write permissions to resources they own (and transfer ownership). So essentially each resource has a policy that says who can do what with it.
I know RBAC, ABAC, but I am not sure what is the official term for the model I described.
You have described the classic "Discretionary Access Control (DAC)" model.
https://resources.infosecinstitute.com/certification/access-control-models-and-methods/
