After decoding the user role encapsuled in active packet, we can obtain the method describing policy of access control in policy store, called capability.

• 在主动信包中封装用户角色信息，主动节点解析出用户角色后，依据它在策略库中匹配相应的描述控制访问权限策略的方法，即权能。