Sylvia L. Osborn Role-based access control: past, present and future. 4 2006 PST http://doi.acm.org/10.1145/1501434.1501439 conf/pst/2006 db/conf/pst/pst2006.html#Osborn06