Privacy-aware role-based access control