7. The method of claim 1 , wherein the SPS program includes one or more nodes that identify properties, edges, and node variables.
1. A method comprising: receiving a request for accessing data stored in a storage location; in an event of a failure in retrieving data stored in the storage location, determining whether the failure is associated with an entirety of the request or a portion of the request; upon determining that the failure is associated with the portion of the request: retrieving, from Hall the storage location, a storage and privacy service (SPS) program expressing one or more access control rules; granting, based on the SPS program, access to data that is retrievable from the storage location; generating, using a processor, a verification representation representing an abstraction of the SPS program based on one or more assertions; submitting the verification representation to a constraint solver to generate a set of access control outputs; and determining if the set of access control outputs returned from the constraint solver satisfy a desired set of privacy constraints in view of the one or more assertions.