What is “Reflective DataBase Access Control” (RDBAC) ? “reflective” : enable a system (namely, a set of data objects) to reason about itself. The policy itself contains a database query