At a previous job, one of my coworkers implemented a fairly complex role-based access control system by linking a prolog interpreter to our application. Our problem domain was...very unusual, so this was probably the best solution.