A framework integrating attribute-based policies into role-based access control
Adding Attributes to Role-Based Access Control