An extended authorization model for object databases