Maybe as a starter:

https://en.wikipedia.org/wiki/Capability-based_security

For examples have a look at the "Implementations" section.