An attribute-based authorization policy framework with dynamic conflict resolution