James Joshi Basit Shafiq Arif Ghafoor Elisa Bertino Dependencies and separation of duty constraints in GTRBAC. 51-64 2003 conf/sacmat/2003 SACMAT http://doi.acm.org/10.1145/775412.775420 db/conf/sacmat/sacmat2003.html#JoshiSGB03