Data Access Control Via Virtual External Model - PDF (Russo)