In physical security and information security, access control (AC) is the action of deciding whether a subject should be granted or denied access to an object. The act of accessing may mean consuming, entering, or using. It is often used interchangeably with authorization, although the authorization may be granted well in advance of the access control decision.