All your SQL belong to ARL