1. A computer implemented method comprising: receiving, by a computer device, executing at least part of a functional logic tier of an application, a request from a user for one or more objects present in the functional logic tier; determining that a type of one of the one or more requested objects is associated with an object representative of instance level security; in response to determining that the type is associated with the object representative of instance level security, determining access is authorized to at least some of the one or more objects, determining access comprising: obtaining a first data access statement configured to obtain data associated with the one or more objects from a data store, obtaining a second data access statement configured to access an instance level security feature in the data store, generating a third data access statement comprising combining the first data access statement and the second data access statement, and accessing, by a computer device executing at least part of a data tier of the application, a linking data structure in the data tier of the application that links the access authorized user with at least some of the one or more objects using the third data access statement; and providing the at least some of the one or more objects to the access authorized user; wherein multiple objects representative of instance level security are associated with the same type of object; and wherein securing the object using the object representative of instance level security does not require change to a user interface accessing the business object.