RE: Bibliography

I didn't see RFC 3060 at the website, it would be good to add.

Another article on grammar for policy would be a good one to add too
http://iridal.phys.uu.nl/aaaarch/rfc/draft-irtf-aaaarch-generic-pol-00.txt
(Krishna sent this one way back).

Another interesting article, on Role Based Access Control is
 http://patriot.net/~kurt/IEEE-IC-Gutzmann.pdf
Not sure you want to post it at the site.

-Suresh