Teresa F. Lunt Access control policies: Some unanswered questions. 43-54 1989 8 Computers & Security 1 http://dx.doi.org/10.1016/0167-4048(89)90038-2 db/journals/compsec/compsec8.html#Lunt89