Product Models for Access Control