The hospital client you are working with needs to do a better job restricting access to patient records. They want only doctors to have access to records for their patients. What type of access control method might work well in this situation?

Question $6$ options:

Role$-$based access control $($RBAC$)$

Mandatory access control $($MAC$)$

Attribute$-$based access control $($ABAC$)$

Discretionary access control $($DAC$)$