https://123dok.net/document/oz1k5dey-language-specific-vs-language-independent-approaches-embedding-semantics-on-a-metamodel-for-testing-and-verifying-access-control-policies.html