Adam,
In comment #1, is "User2 can create a role Dom2R2 implies Dom1R1" a typo? That assertion seems to contradict the second line of the what should be enforced right below it.
Adam,
In comment #1, is "User2 can create a role Dom2R2 implies Dom1R1" a typo? That assertion seems to contradict the second line of the what should be enforced right below it.