Role-Based Access Control by David F. Ferraiolo, D. Richard Kuhn & Ramaswamy Chandramouli