Visible to the public Quantitative Assessment of Access Control Compliance