Reachability analysis for attribute based user-role assignment model