Steve Barker Access Policy Specification for Web Applications. 45-49 2004 conf/itcc/2004-2 ITCC (2) http://doi.ieeecomputersociety.org/10.1109/ITCC.2004.1286588 db/conf/itcc/itcc2004-2.html#Barker04