User Group Structures in Object-Oriented Database Authorization