Privacy-aware Collaborative Access Control in Web-based Social Networks