1. A system for administration of access control to numerous resources and objects, comprising: a data store for storing objects; a controller for storing and operating resources; a client computer for executing an application program for requesting authorization to the resources and objects; a store of rules about requestors and resources and/or objects for determining whether requested authorizations should be allowed; an authorization mechanism in communication with the application program and store of rules for receiving authorization requests from the client computer, consulting the store of rules for determinations whether the requested authorization should be allowed, accessing the data store and/or controller as requested in an authorized request for resources and/or objects, and returning a result from the access to the client computer; and an administrative tool for creating and manipulating the rules about requestors and resources and/or objects, the administrative tool having an application programming interface.