ACL (Access Control List): Defines what an entity may or may not do (permissions list)