Most commercial DBMSs provide an approach to managing privileges that uses SQLcalled Discretionary Access Control (DAC). The SQL standard supports DAC throughthe GRANT and REVOKE commands. The GRANT command gives privileges to users,and the REVOKE command takes away privileges. We discussed how the SQL standard supports discretionary access control in Section 6.6.