John Hale Jody Threet Sujeet Shenoi Capability-Based Primitives for Access Control in Object-Oriented Systems. 134-148 1997 conf/dbsec/1997 DBSec db/conf/dbsec/dbsec97.html#HaleTS97