US7895639B2 - Methods and Systems for Specifying and Enforcing Access Control in a Distributed System