Testing Security Policies: Going Beyond Functional Testing
Formal Specification for Role Based Access Control User / Role and Role / Role Relationship Management