Supporting location-based conditions in access control policies