A model of OASIS role-based access control and its support for security (2002)

by Jean Bacon, Ken Moody, Walt Yao
Venue:ACM TRANSACTIONS ON INFORMATION AND SYSTEM SECURITY (TISSEC