Archive Hive

Unlike ACM, Access Control Lists stores each column with an object. Assume that black_socks is an object, and Hira is a subject, then an ACL rule would look something like this:
black_socks: { (Hira, rwx) }

Furthermore, we also have Capability Lists. Capability Lists looks just like ACL’s but they are written based on subjects. For example:
Hira: { (black_socks, rwx) }

An ACL answers “a given subject can access which objects?”. A CL answers “a given object can access which subject?”.

There is also a Role Based Access Control (RBAC) which bridges a relationship between a subject and an object.