Future directions in rolebased access control models
Proposed NIST standard for role-based access control