Access Control Model Based on Role and Attribute and Its Implementation
A framework integrating attribute-based policies into role-based access control