What is Access control? Definition and explanations

Access control determines who may do what on which resource, and enforces that decision on every request. It combines models — by role (RBAC), by attributes (ABAC), by owner — and rests on the principle of least privilege. Its most common weakness is not technical: it is rights accumulated through job changes and never revoked.