Theory of user control systems?
I can't help you with your CMS, but a very good place to read about the logic of access control is Deepak Garg's PhD thesis, Proof Theory for Authorization Logic and Its Application to a Practical File System.