Policies: Action-Centric
Placing trust in demonstrated abilities
Typically test and compile into an authorization certificate
- Driverís License or swimming test
Manage classes of capabilities
- Bank might be factored into Account Creation, Bookkeeping, and Vault Access
- ... Then map onto personnel and objects as needed
- Example: Drinking age laws are intrinsic, not from a registry of drinkers or access controls on bottles