Evaluating access control policies through model checking
Role Based Access Control Models