Analyzing and Managing Role-Based Access Control Policies
A Comparison of Commercial and MilitarY computer Security Policies