A Formal Proximity Model for RBAC Systems