An Access Control Model for Tree Data Structure