On testing for absence of rights in access control models | IEEE Conference Publication | IEEE Xplore