Which statement is true about Discretionary Access Control?

A.
All access to objects must be audited.

B.
Users must take explicit action to share files.

C.
Users must have sufficient clearance to view an object.

D.
The owner of the data is authorized to grant access to any user.