Qualitative And Quantitative Guarantees For Access Control