 Barkley (1997) showed that "RBACm" and "ACLg" are equivalent.In modern SQL implementations, ACLs also manage groups and inheritance in a hierarchy of groups.So "modern ACLs" can express all that RBAC express, and are notably powerful (compared to "old ACLs") in their ability to express access-control policy in terms of the way in which administrators view organizations.