1. A method for implementing a computer resource access control policy comprising: abstracting an access control policy from access check mechanisms, said access check mechanisms having policy expression capabilities equal or more limited than the access control policy.