Text this: Model-based testing of access control requirement in multi-tenant application: an extensive life cycle