Authorization specification and enforcement in Federated Database systems