Although mandatory access control does address a major weakness of discretionary
access control, a major disadvantage of MAC is the rigidity of the MAC environment. For
example, MAC policies are often established by database or systems administrators, and
the classification mechanisms are sometimes considered to be inflexible.