Access control policy combining: Theory meets practiceNinghui LiQihua Wanget al.2009SACMAT 2009Conference paper