Specifying and Reasoning About Dynamic Access-Control Policies · Study