US7644085B2 - Directed Graph Approach for Constructing a Tree Representation of an Access Control List