1. A method comprising: displaying resources; providing altitude stored in a table for a set of the resources; providing access control rules stored in the table for the set of resources at the altitude; providing a file object and a path in a table entry of the table associated with a resource of the set of resources, wherein the table entry further includes the altitude and an access control rule of the access control rules; receiving at runtime a request for the resource from an application having a process ID; determining whether the process ID is associated with the file object and the path; if it is determined that the process ID is associated with the file object and the path: populating a runtime table with the altitude, the access control rule, and the process ID; if it is determined that the process ID is not associated with the file object and the path: setting the access control rule to a Pass Through access control rule; populating the runtime table with the altitude, the Pass Through access control rule, and the process ID; providing security settings for the set of resources at the altitude.