1. A method of controlling access to objects having attributes defined against hierarchically organized domains, with each domain containing a corresponding fixed number of values, said method comprising: receiving data indicating a plurality of hierarchies of said hierarchically organized domains; displaying the values of the corresponding domains in each hierarchy of said plurality of hierarchies; enabling a user to select a first set of values from the displayed values of the corresponding domains; enabling said user to specify a security rule for a combination of said first set of values and a user entity; and enforcing said security rule when objects having attributes matching said first set of values are accessed by said user entity.