Data security in location-aware applications : an approach based on RBAC