Capability

1. A token allowing its holder an access right. Note: Capability-based systems (e. g. PIDs) provide added value in authentication but, since they are not cryptographically secure, cannot replace the password system [CESG].
2. As used in the context of security, a form of privilege attribute. It is a token (recognized by a process managing access to security objects) possession of which grants access to the security objects to which the token applies [ECMATR46].
3. A privilege attribute used as an identifier for a resource such that possession of the privilege attribute confers access rights for the resource [ECMA138].
4. A token used as an identifier for a resource such that possession of the token confers access rights for the resource [7498-2].