ACLs and capability based security are two security models capable of what?
Within computer systems, two of many security models capable of enforcing privilege separation are access control lists (ACLs) and capability-based security.