Key points are not available for this paper at this time.
Merging the best features of RBAC and attribute-based systems can provide effective access control for distributed and rapidly changing applications.
Kuhn et al. (Tue,) studied this question.