Privilege Assignment in Departmentalized Hospitals