From an operational point of view, capability lists make it easy to determine the access rights that form a given domain; however, in a capability environment, it ishard if not impossible to determine the domains that include access rights for a given object