Which of the following is a means of restricting access to objects based on the identity of the subject to which they belong?
A. Mandatory access control
B. Group access control
C. Discretionary access control
D. User access control