1. A computer-implemented method for generating access control information, the method comprising: receiving an access control rule that identifies a characteristic; identifying at least one entry in user information that is associated with the identified characteristic; identifying at least one entry in data object information that is associated with the identified characteristic; and generating access control information that permits at least one user associated with the at least one entry in the user information to access the at least one entry in the data object information.