Enforcing confidentiality and data visibility constraints : an OBDD approach