On the complexity of authorization in RBAC under qualification and security constraintsYuqing SunQihua Wanget al.2011IEEE TDSC