A framework integrating attribute-based policies into role-based access control
Role Based Access Control Models