Unresolved attacks in distributed data usage control

In policy-based, distributed data usage control infrastructures, users, administrators, wiretappers,malicious applications are the usual components of an attacker model. Are there any specific attacks in any of the given category or elsewhere that are still left untouched in Information security research? Any ideas are appreciated.