An access control matrix combines the concepts of directory control and an access control list into a single table.
=====
A capability can be thought of as one of the triples from an access control matrix
Can be thought of as a ticket for a particular kind of access
Ticket can be single use or multi-use