A model for attribute-based user-role assignment
Configuring role-based access control to enforce mandatory and discretionary access control policies