1. A method comprising: receiving a first command of an application to invoke a function of a user interface; identifying, using a computer processor, a first authorization context based on a first user context and the function of the user interface invoked; applying access criteria associated with the first authorization context to provide user access to a first portion of application data; receiving a second command to invoke the function in a second instance of the application; identifying a second authorization context based on a second user context and the function of the user interface invoked; and applying access criteria associated with the second authorization context to provide user access to a second portion of the application data and restrict access to the first portion of application data.