which of the access control schemes listed is the least restrictive