Gail-Joon Ahn Ravi S. Sandhu Role-based authorization constraints specification. 207-226 2000 3 ACM Trans. Inf. Syst. Secur. 4 http://doi.acm.org/10.1145/382912.382913 db/journals/tissec/tissec3.html#AhnS00