The RSL99 language for role-based separation of duty constraints | Synapse