Access Control Model Based on Role and Attribute and Its Implementation
Adding Attributes to Role-Based Access Control