A Logic-based Approach to Data-Dependent Access Control in RDBMSs