Preserving Privacy in On-Line Analytical Processing