1. A method, comprising: maintaining, by a policy enforcement system in a first compute node, a plurality of policies and data associating a plurality of user credentials with the plurality of policies; intercepting, by the policy enforcement system, a request for data, the request being sent from a compute process to a file system in the first compute node, the request further comprising user credentials, wherein a first task is assigned to the first compute node by a resource manager managing a plurality of tasks comprising the first task and a plurality of compute nodes comprising the first compute node, and wherein the policy enforcement system is logically placed between the compute process and the file system; sending the request for data from the policy enforcement system to the file system; receiving the data by the policy enforcement system from the file system; selecting, by the policy enforcement system from the plurality of policies, based on the received user credentials and the data associating the plurality of user credentials with the plurality of policies, one or more policies that correspond to the received user credentials; filtering, by the policy enforcement system, the data from the file system based on the one or more policies, the filtering causing at least a portion of the data from the file system, when presented, to display as one or more masking characters instead of as originally provided by the file system; and sending the filtered data by the policy enforcement system to the compute process, the sending allowing a client device to access the filtered data through the compute process.