Patent ID: 8695088

Claim:
A system for controlling an order of access to a computing resource, comprising: a memory; a processor couple to the memory; logic, stored on the memory for execution on the processor, for: generating a first capability object, the first capability object comprising a first set of attributes for enforcing an access policy corresponding to a computing object, the set of attributes comprising storage for: information specifying a party authorized to access the computing object; and information specifying a first authorized action with respect to the computing object by the first authorized party; generating a second capability object, the second capability object comprising a second set of attributes corresponding to the first set of attributes for enforcing the access control policy, the second set of attributes comprising storage for: information specifying a second party authorized to access the computing object; and information specifying a second authorized action with respect to the computing object by the second authorized party; enabling access to the computing object by the second party if the first party has completed the first authorized action; and denying access to the computing object by the second party if the first party has not completed the first authorized action.