A User-Centered, Modular Authorization Service Built on an RBAC Foundation. - Mary Ellen Zurko; Richard T. Simon; Tom Sanfilippo (S&P, 1999)