Succinct representation of flexible and privacy-preserving access rights