A MVC Framework for Policy-Based Adaptation of Workflow Processes: A Case Study on Confidentiality