Effects of access-control policy conflict-resolution methods on policy-authoring usability