1. A method, comprising: maintaining, by a policy enforcement system in a first compute node, a plurality of policies and data associating a plurality of user credentials with the plurality of policies; receiving, from a compute process, a request for data from a file system in the first compute node for use in a first task, the request further comprising user credentials, the first task assigned to the first compute node by a resource manager managing a plurality of tasks comprising the first task and a plurality of compute nodes comprising the first compute node; sending the request for data to the file system; receiving the data from the file system; selecting from the plurality of policies, based on the received user credentials and the data associating the plurality of user credentials with the plurality of policies, one or more policies that correspond to the received user credentials; filtering, by the policy enforcement system, the data from the file system based on the one or more policies; and sending the filtered data to the compute process.