Role based access control on MLS systems without kernel changes
Role Based Access Control Models