Multi-table access control is disclosed that limits access to tables when a requirement for access to multiple columns is detected, where the multiple columns includes at least one column from one table and another column from another table. In an embodiment, the detection of the requirement for access to multiple columns triggers a policy to rewrite the query to include a condition expression that limits access to the multiple columns to those that are entitled to access.