Role templates for content-based access control

This paper proposes a role-based access control model that provides special mechanisms for the definition of content-based access control policies. More precisely, this model defines the concept of parameterized privilege to restrict the access on subsets of objects, and the concept of role template to support composition and encapsulation of parameterized privileges.