Role-based access control policies model the users domain by means of complex structures where the roles assumed by the users are specialized into more concrete subroles which inherit properties and authorizations from their parents. In this paper, we describe how to combine these principles and adaptation to provide personalized access to the different types of users of a web-based course. We also present Courba, a platform that generates personalized web-based courses using XML to support the definition of access policies.