Detecting indirect conflicts between access control policiesLaura Costa SarkisViviane Torres da Silvaet al.2016SAC 2016