Access Control List (ACL)
A list attached to a resource that names which subjects can access it and how — the column-slice of the access control matrix, and the most common way DAC is actually implemented.
aka: ACL
An ACL answers “who can touch this resource” by looking at the resource itself, which makes it easy to audit one object’s access but hard to answer the opposite question — “everything one person can touch” — without scanning every resource in the system. On Windows, the order entries appear in an ACL is itself a security decision, since evaluation stops at the first matching entry.