Abstract and Concrete Models for Secure Database Applications