Proceedings of the 3 rd ACM Workshop on Role Based Access Control ( RBAC ) , 22-23 October 1998 George Mason