1. A system for adding security data to a search index, comprising: a processor configured to: select an object data in a search index that corresponds to an object in an object tree in an object-oriented database, wherein an index entry in the search index comprises the object data that corresponds to the object in the object tree, wherein the index entry comprises field data, wherein field data comprises a list of attributes and relation data associated with the corresponding object in the object tree; add security entity data to the index entry corresponding to the selected object data, wherein the security entity data comprises a reference to a security entity object instance in the object tree in the object-oriented database, wherein the security entity object instance is one of more than two security entity object instances in a security entity object tree in the object tree, wherein the security entity object instance comprises a security policy defining security permissions to attributes and relations of the object data, wherein the security entity object instance comprises one or more permissible operations allowed to be performed by a report user on the corresponding object, and wherein the permissible operation includes one of the following: a read operation, a write operation, an edit operation, a delete operation, an access operation, a view operation, or a modify operation; determine an access list of security entity object instances that describe the object data the report user is allowed to access, wherein the access list comprises a security entity object instance the report user has a relation with in the security entity object tree and all child security entity object instances when traversing the security entity hierarchy downwards from the security entity object instance that the report user has a relation with and a report user with more access to object data in the search index has an access list with more security entity object instances; and a memory coupled to the processor and configured to provide the processor with instructions.