M. A. C. Dekker Jason Crampton Sandro Etalle RBAC administration in distributed systems. 93-102 2008 SACMAT http://doi.acm.org/10.1145/1377836.1377852 conf/sacmat/2008 db/conf/sacmat/sacmat2008.html#DekkerCE08