Specifying and Enforcing Access Control Policies for XML Document Sources