Capability-based protection for integral object-oriented systems | Publicación