In software, everything is objects. Objects have capabilities, aka permissions or authorization.
But most systems hand out capabilities in bulk. Log in once, and you can touch almost everything that account is allowed to touch.
Object-capability security is different.
