Verification of Access Control Policies in Software Architectures