1. A method, comprising: providing an access control policy for a structured document, wherein the access control policy comprises a plurality of access control rules; generating a path for each of a plurality of nodes in the structured document; and transforming the plurality of access control rules into an executable value expression for each generated path by using a condition that indicates who is granted and/or denied access to each generated path.