Policy storage for role-based access control systems

Role-based access control has been a focal area for many researchers over the last decade. There have been a large number of models, and many rich specification languages. However there has been little attention paid to the way in which access control policy is stored persistently. This paper investigates policy storage form the perspective of access control to the policy itself, and of its distributed administration.