Building access control policy model for privacy preserving and testing policy conflicting problems