On Fine-Grained Access Control for XML