A Type System for Discretionary Access Control