On access control requirements for inter-organizational workflow