1. A method implemented by a computing system in response to execution of program instructions by a processor of the computing system, comprising: receiving a request from a user to start a report associated with a node of a business object object model, where the node of the business object object model is associated with an access control list associating instances of the node of the business object object model with at least one access context restriction; determining a user access context restriction associated with the user; retrieving at least one instance of the node of the business object object model based on the user access context restriction and on the access control list associated with the node of the business object object model; providing an instance of the report to the user for display, the instance of the report populated with the at least one instance of the node of the business object object model; determining that the report and a work center view are associated with a same access context; and creating an access policy authorizing the user to start the report and including the user access context restriction, the user access context restriction corresponding to the access context of the work center view, wherein the user access context restriction is determined based on the access policy.