Adding Attributes to Role-Based Access Control · Study