ls3-www.cs.tu-dortmund.de/cms/medien/publikationen/sacmat2003.pdf
Cooperative Role-Based Administration
Definition 2 (unit relation) The binary predicate
unitin(u1, u2)
holds iff u1, u2 ∈ UT and u1 < u2 according to the unit hierarchy or if u1 and u2 are identical.
As authorization spheres are interpreted [...] form rolein(r2, r1) which holds iff role r2
is a subordinate role of r1 according to the role hierarchy specified.
cando(as, s, o, 〈sign〉a)← L1&..&Ln Li ∈ F dercando(as, s, o, 〈sign〉a)← L1&..&Ln Li ∈ F ∪ [...] cando decide(as, sa, s, o, 〈sign〉a)← L1&..&Ln Li ∈ F ∪ cando ∪ dercando
do(as, s, o, 〈sign〉a)← L1&..&Ln Li ∈ F ∪ cando ∪ dercando ∪ decide grant(as, s, o, 〈sign〉a)← L1&..&Ln Li ∈ F∪cando∪dercando∪decide∪do∪ …