History-based Access Control with Local Policies