Reference to "Limitations of access control design"