Access control management with provenance in healthcare environments