1. A method comprising: determining an altitude for at least one resource used in executing a streaming software application in a streaming software container; determining access control rules for the at least one resource based on the altitude; determining security settings for the at least one resource based on the altitude; managing access control to the at least one resource used in executing the streaming software application in the streaming software container based on the access control rules and the security settings for the at least one resource; receiving a request from a requestor for the at least one resource, the request in association with a process ID for the at least one resource having a resource ID; determining the access control rules for the at least one resource based on the altitude further comprising, looking up the process ID and the resource ID in a requestor-specific access control table for the altitude to determine the access control rules, the access control rules specific to a requestor generating the request; determining if the access control rules specify accept; if it is determined that the access control rules specify accept, looking up in a resource-specific access control table for the altitude using the resource ID to determine requestor-agnostic security rules for the at least one resource; managing access control to the at least one resource used in executing the streaming software application in the streaming software container further comprising, granting access to the at least one resource used in executing the streaming software application in the streaming software container according to the requestor-agnostic security rules.