A Case Study in Access Control Requirements for a Health Information System. - Mark Evered; Serge Bögeholz (ACSW, 2004)