Benyuan Yang: Enforcement of separation of duty constraints in attribute-based access control. Comput. Secur. 131: 103294 (2023)