An integrated access control for securely querying and updating XML data