1. A method for providing access to a resource on a network, comprising the steps of: receiving an identification of said resource, said identification includes an absolute portion and a query portion; using said query portion to identify a first access rule; applying said first access rule; and allowing access to said resource, said step of allowing access is not performed if said first access rule is not satisfied.