An authorization model for distributed hypertext systems