nRole assignment
nExtend the role
assignment policy declaration
language to support more data types and operators
nDevelop mechanisms to
enforce the trust requirements
throughout the lifetime of an assigned role
nSupport static
separation of duty with or without the role hierarchy