As sibling says, they are deeply linked. "The capability paradigm is about access control. When a system, such as an OS or a website, is presented with a reque

As sibling says, they are deeply linked. "The capability paradigm is about access control. When a system, such as an OS or a website, is presented with a request for a service it provides, it needs to decide if it should actually do what the requestor is asking for. The way it decides is what we’re talking about when we talk about access control. If you’re like most people, the first thing you’re likely to think of is to ask the requestor “who are you?” The fundamental insight of the capabilities paradigm is to recognize that this question is the first step on the road to perdition." "That’s highly counterintuitive to most people, hence the related controversy."