1. A method for controlling access to information on a computer system being accessible to a plurality of users, wherein the computer system has information including a plurality of data objects, the steps comprising: providing an access right for each relationship between a user and a data object, wherein each user can have a plurality of relationships to each data object, wherein at least one user has a plurality of relationships with one data object, and wherein each access right comprises a security classification; obtaining a request from a user for information about a data object; finding at least one of the relationships between the user and the data object; determining the security classification for each relationship found between the user and the data object; determining a security classification of the data object; granting the user access to the data object if a level of one of the security classifications for all the relationships is greater than a level of the security classification of the data object; and denying the user access to the data object if the security classifications for all the relationships are less than a level of the security classification of the data object.