Controlled query evaluation for enforcing confidentiality in complete information systems