[Thomsen91] D. Thomsen, Role-Based Application Design and Enforcement, Database Security IV, IFIP, 1991, Elsevier. [This paper describes the design and enforcement of role-based security in trusted computing bases.]