In 1996, Chiu and Hsu proposed a multi-role-based access control (MRBAC) po
licy. Nevertheless, the Chiu-Hsu scheme can be further enforced Ly role lis
t, union, and intersection (i.e. containment) to deal with the problems reg
arding the MRBAC and the object role with different security ranks. The aut
hor presents an improvement of the Chiu-Hsu scheme using more detailed list
structure. Tills improvement offers some significant advantages.