A Generalized Framework for Database Access Controls