Lambda-RBAC: Programming with Role-Based Access Control (Logical Methods in Computer Science, 2008)