Capability-Based Security

Capability-based security grants authority through possession of an unforgeable reference or credential for a specific resource and permitted operation. A component can receive only the authority needed for its task and delegate a restricted form when the system supports attenuation.

This differs from routinely searching global permissions based only on a caller’s identity. Practical safety depends on how capabilities are protected, passed, revoked, and prevented from leaking to unauthorized parties.