Access Control and Service-Oriented Architectures by K. Leune