Assertion: kernel | /r/CapableOf | check the access
Facets:
value: for it
type: OTHER
Source sentences:
text: When an application needs to access an object protected by a capability, it performs a system call and the kernel then checks whether the application's capability grants it permission to perform the requested action, and if it is permitted performs the access for it (either directly, or by delegating the request to another user-level process).