Every user in the authentication framework has a set of associated capabilities.

Defining new capabilities:
define-capability ( word -- )


Capabilities are stored in a global variable:
capabilities


Protected resources can be restricted to users possessing certain capabilities only by storing a sequence of capabilities in the capabilities slot of a protected instance.