A cloud service provider must maintain a strict data security policy due to handling multiple clients with varying levels of sensitive information. They need an access control method which enforces security policies that prevent users from sharing resources unless explicitly permitted by the policy, based on their security clearance and the data classification. Every access attempt must be compared against a set of policy rules before being granted. Which security control model should be implemented?
Mandatory access control (MAC)
Attribute-based access control (ABAC)
Role-based access control (RBAC)
Access Control Lists (ACLs)