A Unified Framework for Enforcing Multiple Access Control Policies