The specification and enforcement of authorization constraints in workflow management systems
task - based authorization controls ( tbac ) : a family of models for active and enterprise - oriented autorization management .