Declarative privacy policy: finite models and attribute-based encryption