Testing access control and obligation policies | IEEE Conference Publication | IEEE Xplore