With Discretionary Access Control, the

Blank $1$

controls access to an object, while with Non$-$Discretionary Access Control, the

Blank $2$

controls access.