<a href="http:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;RBAC" rel="nofollow">http:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;RBAC</a> is far more readable that the article in question and I have just proposed a merge on Wikipedia for &#x27;Capability-based security&#x27; and &#x27;Object-capability model&#x27;, support if you wish. FWIW, I wrote an application-level implementation of RBAC a few years ago for a secure financial system prototype. It was an interesting experience, to say the least.