The decentralized and anonymous characteristics of P2P environments make the task of controlling access to sharing information more difficult, which cannot be done by traditional access control methods. In this paper, the access control requirements in such environments were identified, and an access control model for P2P file-sharing systems based on trust and recommendation was proposed. The model integrates aspects of trust and recommendation, fairness based participation schemes and access control schemes.