Access control for smarter healthcare using policy spaces