A model of accountability, confidentiality and override for healthcare and other applications. - Jim J. Longstaff; Mike A. Lockyer; M. G. Thick (ACM Workshop on Role-Based Access Control, 2000)