Access control policies, models, and mechanisms