David F. Ferraiolo Vijay Atluri A meta model for access control: why is it needed and is it even possible to achieve? 153-154 2008 SACMAT http://doi.acm.org/10.1145/1377836.1377860 conf/sacmat/2008 db/conf/sacmat/sacmat2008.html#FerraioloA08