An access rights analysis including a query automaton generation unit for generating a query automaton from a path expression in which retrieval conditions for a database. An access control automaton generation unit generates an access control automaton from an access control policy; a schema automaton generation unit generates a schema automaton from a schema; and a logic operation unit performs a logic operation related to each of the generated automatons. By use of the above components, access rights in database retrieval using the path expressions are decided without checking the XML document itself in the XML database and checking by each node.