A distributed calculus for role-based access control