The system controls access to resources using mandatory access control and discretionary access control.