Extending role-based access control model with states

The role-based access control (RBAC) concept is a powerful way of describing access control policy. The goal of this paper is to include the notion of states and state transitions into the RBAC model and to view changes of components of RBAC model as transitions between states of one access control policy. This allows us to better review properties of the access control policy as well as compare the policies.