A privacy-aware access control system · Study