Access control scheme with tracing for outsourced databases