An extended abstract of a preliminary version of this paper appeared in Proceedings of the 8th ACM Conference on Computer and Communications Security (CCS-8), pp. 156–165, ACM Press, November 2001. We introduce a simple Role-based Trust-management la