An Access Control Language for a General Provenance Model
Introducing secure provenance: problems and challenges