Sejong Oh, Seog Park: Task-role-based access control model. Inf. Syst. 28(6): 533-562 (2003)