Access Control for a Collaborative, Distributed Business Environment