Specifying and Enforcing the Principle of Least Privilege in Role-Based Access Control
Role Based Access Control Models