On formalizing and normalizing role-based access control systems - Power, David.