> think about them in terms of which actions are available to a user at each endpoint It's called the Capability Model: https://en.wikipedia.org/wiki/Capabilit

> think about them in terms of which actions are available to a user at each endpoint It's called the Capability Model: https://en.wikipedia.org/wiki/Capability-based_security https://en.wikipedia.org/wiki/Capability-based_security