Adding Attributes to Role-Based Access Control

Merging the best features of RBAC and attribute-based systems can provide effective access control for distributed and rapidly changing applications.