Security models for web-based applications
The specification and enforcement of authorization constraints in workflow management systems