The dynamic predicate: integrating access control with query processing in XML databases