On a Formal and User-friendly Linguistic Approach to Access Control of Electronic Health Data