US8959580B2 - Enforcing Policy-Based Application and Access Control in an Information Management System