in Secure Programming Practices by
Which of the following is not an authorization type?

a) Role-based Access Control

b) Mandatory Access Control

c) User Access Control  

d) Discretionary Access Control
...