1. A method for providing access to a resource on a network, comprising the steps of: receiving at an access server an identification of said resource, said identification includes an absolute portion and a query portion; using said query portion to identify a first access rule from a plurality of access rules stored at said access server; determining whether access to said resource is authorized based on said identification of said resource without granting authorization to said resource, said determining including accessing said first access rule for said resource and accessing an identity profile for a first user to determine whether at least a portion of said first access rule is satisfied based on information in said identity profile, wherein said first access rule is not part of said identity profile; and allowing access to said resource, said step of allowing access is not performed if said first access rule is not satisfied.
7. The method according to claim 1 , wherein: said identification of said resource includes a URL; and said absolute portion includes a file name.