Mark Vroblefski, Andrew N. K. Chen, Benjamin B. M. Shao, Matthew Swinarski: Managing user relationships in hierarchies for information system security. Decis. Support Syst. 43(2): 408-419 (2007)