Security Policies in Object-Oriented Databases