David W. Chadwick Alexander Otenko RBAC Policies in XML for X.509 Based Privilege Management. 39-54 2002 conf/sec/2002 SEC db/conf/sec/sec2002.html#ChadwickO02