1. A method of controlling access to a resource, said method comprising: receiving, from a user, a request for access to a resource; determining a protection class of the resource; determining a role assigned to the user; determining permissions that have been granted to the role based on a set of privileges assigned to the role and the protection class of the resource; and permitting access to the resource based on the permissions.