  In this paper we explore the usage of rule engines in a graphical framework
for visualising dynamic access control policies. We use the Drools rule engine
to dynamically compute permissions, following the Category-Based Access Control
metamodel.
