What can be accomplished by storing on each subject a list of rights the subject has for every
object?
A.
Object
B.
Capabilities
C.
Key ring
D.
Rights
Explanation:
Capabilities are accomplished by storing on each subject a list of rights the subject
has for every object. This effectively gives each user a key ring. To remove access to
a particular object, every user (subject) that has access to it must be “touched”. A
touch is an examination of a user’s rights to that object and potentially removal of
rights. This brings back the problem of sweeping changes in access rights.