Comprehensive Two-Level Analysis of Static and Dynamic RBAC Constraints with UML and OCL
Kodkod: A relational model finder