1. A method for managing security on a business application management platform implemented on a computer, comprising the steps of: partitioning a plurality of business objects into a plurality of hierarchical domains; and creating a security list configured to grant a member the right to perform a security operation on said business object located in said hierarchical domain, comprising the steps of: adding said security operation to said security list; applying said security operation to one of said plurality of domains; and adding said member to said security list.