Naizhen Qi, Michiharu Kudo: Access Control Policy Languages in XML. Handbook of Database Security 2008: 55-71