http://www.oracle.com/technology/products/id_mgmt/orm/htdocs/oracle_role_manager_fov.htm