1. A computer program product to be used in administrating user access to information instances, the computer program product being tangibly embodied in an information carrier and comprising: rules establishing authorizations to information instances in a computer system, each of the rules authorizing a predefined subject to perform a predefined action on a predefined object; and an activation function for an administrator to selectively activate at least one of the rules, the activated rule to be applied upon a user seeking to perform an action on any of the information instances.