1. A computer-implemented method of controlling access to enterprise applications, the method comprising the steps of: storing information for a plurality of users in a user table, identifying each user by a unique login used as a primary key; storing information for a plurality of roles in a role table, identifying each role by a unique name as a primary key; storing information for a plurality of features in a feature table, identifying each feature by a unique name as a primary key; creating, by a processor, a first join-table for mapping users to roles, using their respective primary keys as a pair of foreign keys to assign users to roles; creating, by the processor, a second join-table for mapping features to roles, using their respective primary keys as a pair of foreign keys to assign features to roles; and permitting, by the processor, a user to access a requested feature if and only if the requested feature is assigned to a role in the second join-table which is also assigned to the user in the first join-table.