If subject owns the capability and it is valid, the application is allowed to perform the corresponding action. Roles are known both in the subject and object. Additional roles may be created at any time during run. Role is an abstract class representing a generic role object. Other role classes can easily be created like one prompting the user for a password instead of a simple confirmation.
Roles are either persistent or non-persistent.
The set of all roles. Obtain a short string describing the role and its parameters. Dump roles to the log file. The set of all roles. A hashtable indexed by the names of the roles.