Efficient run-time solving of RBAC user authorization queries: pushing the envelope