US8407345B2 - Enforcing Application and Access Control Policies in an Information Management System with Two or More Interactive Enforcement Points