Roger A. Grimes at InfoWorld – Go RBAC now:
„Let’s assume that application developers do know exactly what permissions are needed for each task in their application — and this is indeed true of any application developed with RBAC in mind. The developers create application-specific groups that mimic the various roles that an end-user would perform in their application.“