privilege attribute certificate (PAC)
Data, describing a principal's privilege attributes, that has been certified by an authority. In DCE, the privilege service is the certifying authority and seals the privilege attribute data in a ticket. The authorization protocol, DCE authorization, determines the permissions granted to principals by comparing the privilege attributes in PACs with entries in an ACL.