Reasoning About Information Disclosure In Relational Databases