1. A computer-implemented method for enforcing application environment based security policies using role based access control, the method comprising the steps of: detecting a state of an aspect of an application environment in which an application interacts with a user; wherein the aspect corresponds to an application environment role that is to be activated based on a specified state of the aspect; based on the detected state of the aspect and the specified state of the aspect, activating the application environment role such that an operation on an access controlled object, when caused by the application to be performed on behalf of the user, is successfully performed; wherein the object is associated with an access control list indicating that activation of the application environment role is required to successfully perform the operation on the object.