1. A computer-implemented method for enforcing application environment based security policies using role based access control, the method comprising: examining an aspect of an application environment in which an application interacts with a user to determine whether the application environment aspect is in a particular state; based on determining the application environment aspect is in the particular state, activating an application environment role in a session established at a server; wherein the user is not assigned to the application environment role; sending a request to the server on behalf of the user to perform an operation on an access controlled object; based on the application environment role being activated in the session, the server allowing performance of the operation on the access controlled object; wherein the application environment role is associated with an access control list; wherein the access control list is associated with the access controlled object; wherein the access control list specifies that the application environment role has permission to perform the operation on the access controlled object; and wherein the server allowing the performance of the operation on the access controlled object is further based on the access control list specifying that the application environment role has permission to perform the operation on the access controlled object.