1. A computer-implemented method of controlling access to enterprise applications, the method comprising the steps of: storing information for a plurality of users in a user table, identifying each user by a unique login used as a primary key; storing information for a plurality of roles in a role table, identifying each role by a unique name as a primary key; storing information for a plurality of features in a feature table, identifying each feature by a unique name as a primary key; creating a first join-table for mapping users to roles, using their respective primary keys and predetermined assignments of users to roles; creating a second join-table for mapping features to roles, using their respective primary keys and predetermined assignments of features to roles; and permitting a user to access a requested feature if and only if the requested feature is associated with a role assigned to the user.