Think that your primary doctor has access to all of your health data stored in the hospital database. Someday you are in the hospital for an urgent need. However, your primary doctor is off-duty that day. The hospital authority assigns an on-duty doctor to see you. However, the on duty doctor may not have access to your health data. He has to get permission to extract a portion or all of your health data. For this, he also needs to ask a nurse to get the data on his behalf. Therefore, the nurse also needs permission to extract the data. Which of the access control should be applied here getting permission for both the on-duty doctor and the nurse?

a. Discretionary

b. Mandatory

c. Clark Wilson

d. Rule-based