In mandatory access control, the system controls access and the owner determines:
Validation
Need to know
Consensus
Verification