I want to know the answer to the following question:
ACLs and capability based security are two security models capable of what?
All the background I'm provided with is that "This does not mean practical flaws exist in all ACL-based systems, but only that the designers of certain utilities must take responsibility to ensure that they do not introduce flaws.[citation needed]". Is that enough to answer the question?
Answer: no