A multi-policy access control model is proposed, with the model, access control based on policy regulation and XML based policy description is given. In order to describe the algorithm, we discussed the categorizing, adding, editing and canceling policy. For policy selection and decision, through fossilization and analysis of role, popedom and security policy, fuzzy algorithm is introduced for judging of user popedom. As the analysis reveals, this model can support multiple policy coordination of current models.