Improved Access Controls Flexibility With "OR" Support in Domains