security social-network credit-card set-theory rbac formal-methods role-based-access-control access-control formal-verification formal-languages role-based access-control-list formal-specification mandatory-access-control formal-models alloy-analyzer z-notation access-control-patterns barber-paradox discretionary-access-control