3OSBORN S, SANDHU R. Configuring role-based access control to enforce mandatory and discretionary access control policies[ J]. ACM Transactions on Information and System Security, 2000, 3(2) : 123 - 132.
4LIN A, BROWN R. The application of Security policy to rose-based access control and the common data security architecture[ J]. Computer Communication, 2000, 23(17) : 1584 - 1593.