Outline the mechanisms necessary to control the access of programs or users to the resources defined by a computer system.

 The difference is Access List corresponds directly to the needs of users. And because access-right information for a particular domain is not localized, determining the set of access rights for each domain is difficult. Capability List for Domains does not correspond directly to the needs of users. The process attempting access must be present a capability for that access. Then, protection systems need only to verify that the capability is valid. The right to access must still be checked on each access, and the file-table entry has a capability only for the allowed operations.