Every user in the authentication framework has a set of associated capabilities.

Defining new capabilities:

define-capability ( word -- )

Capabilities are stored in a global variable:

capabilities

Protected resources can be restricted to users possessing certain capabilities only by storing a sequence of capabilities in the capabilities slot of a protected instance.