I think you're looking for capabilitiy-based security. It can be done at OS and language levels to allow enforcing POLA pretty easily. Here's a page with intro's plus deployment in web browser and GUI prototypes:

http://www.combex.com/tech/index.html

Most prominent language is E:

http://erights.org/index.html