Which access control model has a policy that is a function of the subject's characteristics?

A$.$ Discretionary access control $($DAC$)$

B$.$ Role$-$based access control $($RBAC$)$

C$.$ Mandatory access control $($MAC$)$

D$.$ Attribute$-$based access control $($ABAC$)$