Method for User Access Control in a Multitenant Data Management System

A computer readable storage medium comprising a computer program product executable by a processor of a computer for managing user's access to a service adapted to access a data object in a multitenant data management system comprising data of a plurality of entities, wherein the computer program product comprises computer executable instructions for:

• a. determining data object's association with an entity,
• b. determining the existence of a trust relationship between the user and the entity for the user to represent the entity in the context of the service,
• c. determining the user's access rights to the data object, and
• d. granting the user access to the service, if:
• i. the data object is determined to be associated with the entity,
• ii. the trust between the entity and the user is determined to be valid in the context of the service, and
• iii. the user is determined to have valid access rights to the data object.