1. A computer implemented method comprising: receiving, by a computer device, executing at least part of a functional logic tier of an application, a request from a user for one or more objects present in the functional logic tier; determining that a type of one of the one or more requested objects is associated with an object representative of instance level security; in response to determining that the type is associated with the object representative of instance level security, determining access is authorized to at least some of the one or more objects, determining access comprising: accessing, by a computer device executing at least part of a data tier of the application, a link data structure in the data tier of the application that links the access authorized user with at least some of the one or more objects; and providing the at least some of the one or more objects to the access authorized user.