Access control for distributed databases