1. A method comprising the steps of: receiving a reference, over a network, to a data object from a user; identifying, via the network, an entity that controls the data object, such that spatial, temporal, social and topical data available to the network that relates to the data object are retrieved and utilized for said identifying the entity that controls the data object; retrieving, via the network, a permission for the data object, the permission being associated with the entity that controls the data object, said permission comprising a permission context having permission context criteria comprising spatial, temporal, social and topical criteria, and further comprising a set of associations, data axes and data values between each of the spatial, temporal, social and topical criteria, the set of associations are ordered in an order such that each of the associations of the set of associations are evaluated in the order, such that associations that are lower in the order override associations that are higher in the order where the respective associations relate to a same respective data axes and respective data values; retrieving, via the network, spatial data, temporal data, social data and topical data available to the network that relates to the user and to the permission context; determining, via the network, using the spatial data, temporal data, social data and topical data, that the user matches the permission context criteria; in response to determining the user matches the permission context criteria, determining, via the network, using the permission for the data object, the user is one of: permitted to access to the data object and not permitted to access to the data object, such that where the user is permitted access to the data object, access is granted to the data object, and where the user is not permitted access to the data object, access is denied to the data object.