An Integrated Model for Access Control and Information Flow Requirements