High performance secure caching in the mid-tier

A computer-implemented method comprising:

• storing cache versions of security descriptors in a mid-tier cache of a middle tier of a multiple-tier data server system, said security descriptors being from a first tier of the multiple-tier data server system;
• storing, in said mid-tier cache, cache versions of resources subject to said security descriptors,
• wherein a set of resources includes said resources that are subject to said security descriptors,
• wherein said set of resources are stored in said first tier;
• storing, in the mid-tier cache, association data that associates said cache versions of security descriptors with a strict subset of said set of resources;
• wherein said cache versions of security descriptors include a certain cache version of a certain security descriptor of said security descriptors;
• and
• said middle tier determining whether a particular entity may be granted access to a certain resource of said set of resources based on said association data and said certain cache version of said certain security descriptor.