1. A system for generating an access control policy, comprising a user interface for enabling a user to indicate a topic and a set of permissions; a document analyzer for analyzing the content of a plurality of documents to find a set of documents relating to the topic; and an associating subsystem for associating the set of permissions with the set of documents to obtain an access control policy.