1. A database system comprising: a plurality of datasets, each dataset including a plurality of data; and a plurality of database objects, each object having a security label comprising a security classification of the object; at least one database session, the database session having a security label indicating a security classification of the database session; wherein, the database system is operable to allow or deny access to data to a database session based on a security label of a database object and on a security label of the database session.