D. J. Thomsen Role-Based Application Design and Enforcement. 151-168 1990 DBSec db/conf/dbsec/dbsec90.html#Thomsen90