Complex sentence: The current approaches of the access control rest on the three entities ( subject "," action ", object") to control the access the policy specifies that some subject has the permission to realize some action on some object.
Split into simpler sentences: The current approaches of the access control rest on the three entities: "subject, action, object". So, to control the access the policy specifies that some subject has the permission to realize some action on some object.