Designated authority system

Definition
Suppose that some subject tries to perform an operation with some object.

If it must: then we say that it is a designated authority system.
 * not only designate the object
 * not only specify the operation with the object
 * but also choose a subset of its (unforgeable) permisions that allow it to perform that operation with that object