1. A method for controlling access to file system resources in a computer system through the use of externally stored attributes comprising the steps of: generating a file identifier corresponding to each file system object that will have protected and controlled access; storing a record of each said file identifier and associated protected object name for each said file system object in a database, such that there is a file identifier to protected object name map for each file system object; searching the database, at the initiation of a file system object access attempt to determine if the attempted access is to a protected file system object; and generating an authorization decision for access to said file system object in response to said file system object access attempt.