[ http://en.wikipedia.org/wiki/Capability-based_security ]
(for a more recently active discussion, try http://en.wikipedia.org/wiki/Domain_Specific_Language)