Fine-Grained Access Control in Object-Oriented Databases