Web based services and applications have increased the availability and accessibility of information. XML (eXtensible Markup Langauge) has recently emerged as an important standard in the area of information representation. XML documents can represent information at different levels of sensitivity. Access control for XML document stores must recognise the fine grained nature of the docuemnt structure. In this paper we present an approach to access control for XML document stores. This framework is based on RBAC and includes a syntax for specifying access control policies for the store.