1. A computer-implemented method for creating a logical security model based on a physical security model defining user access rights to physical data, the method comprising: for each of the user access rights defined by the physical security model, creating a logical access right definition for a logical model, wherein the logical model comprises a plurality of logical field definitions each comprising a field name and access information for accessing a field of the physical data; and applying the logical access right definitions to the logical model so that the logical model reflects the user access rights to the physical data.