Sejong Oh: Permission-Centric Hybrid Access Control. APWeb/WAIM Workshops 2007: 694-703