1. A system for restricting access to resources comprising: an operating system module adapted to serve a system environment, the system environment associated with a global hierarchy comprising a plurality of nodes representing resources and an isolated environment within the system environment associated with a view of the global hierarchy, the view constraining access of an entity executing in the isolated environment to a subset of the resources, the operating system module adapted to generating the view by creation of a constrained-space-specific hierarchy in volatile storage only, the constrained-space-specific hierarchy not persisted to non-volatile storage and wherein the entity's sole access to the subset of the resources is via the constrained-space-specific hierarchy, the constrained-space-specific hierarchy comprising a subset of the plurality of nodes of the global hierarchy.