>"X wants to do X, Y, Z, Q, E, D, A, B, C on your device. Is that ok?" That's NOT capability based security. (Like Java/Javascript, there's confusion) In a ca

>"X wants to do X, Y, Z, Q, E, D, A, B, C on your device. Is that ok?" That's NOT capability based security. (Like Java/Javascript, there's confusion) In a capability based system you use a power box (a system supplied dialog box) to select files for a program to operate on, just like users do already with file select dialog boxes. It's just that the program ONLY gets capability to operate those files and nothing else. There's no complicated flags or anything like that to mess with. You pick the photo to print and the printer to send it to and you're done.