Ragib Hasan Marianne Winslett Richard M. Conlan Brian Slesinsky Nandakumar Ramani Please Permit Me: Stateless Delegated Authorization in Mashups. 173-182 2008 ACSAC http://dx.doi.org/10.1109/ACSAC.2008.24 conf/acsac/2008 db/conf/acsac/acsac2008.html#HasanWCSR08