A method for controlling access to data objects (106, 108, 110, 112, 114, 116), comprising: - providing a first authorization hierarchy dynamically generated by a plurality of users starting from a first user, wherein the first authorization hierarchy is successively generated in that, starting from the first user, the respective user added most recently to the first authorization hierarchy personally assigns a first access right to a user to be newly added, so that each user encompassed by the first authorization hierarchy is assigned the first access right, and wherein the first authorization hierarchy, in addition to the first user, comprises least two further users; - providing a second authorization hierarchy generated starting from a second user, wherein the second authorization hierarchy is successively generated in that, starting from the second user, the respective user added most recently to the second authorization hierarchy personally assigns a second access right to a user to be newly added, so that each user encompassed by the second authorization hierarchy is assigned the second access right, and wherein the second authorization hierarchy, in addition to the second user, comprises at least one further user; - providing at least one further, third authorization hierarchy generated starting from a fourth user, wherein the third authorization hierarchy is successively generated in that, starting from the fourth user, the respective user added most recently to the third authorization hierarchy personally assigns a third access right to a user to be newly added, so that each user encompassed by the third authorization hierarchy is assigned the third access right, and wherein the third authorization hierarchy, in addition to the fourth user, comprises at least one further user; and - verifying access rights of a third user for access to one of the data objects, wherein access to the data object is only granted when the third user is encompassed both by the first authorization hierarchy, so that he or she is assigned the first access right, and by the second authorization hierarchy, so that he or she is furthermore assigned the second access right, wherein the verification of the access rights of the third user for access to the data object furthermore comprises verifying at least the further third authorization hierarchy, and access to the data object is only granted when the third user is furthermore encompassed by the third authorization hierarchy so that he or she is assigned the third access right. - providing a first authorization hierarchy dynamically generated by a plurality of users starting from a first user, wherein the first authorization hierarchy is successively generated in that, starting from the first user, the respective user added most recently to the first authorization hierarchy personally assigns a first access right to a user to be newly added, so that each user encompassed by the first authorization hierarchy is assigned the first access right, and wherein the first authorization hierarchy, in addition to the first user, comprises least two further users; - providing a second authorization hierarchy generated starting from a second user, wherein the second authorization hierarchy is successively generated in that, starting from the second user, the respective user added most recently to the second authorization hierarchy personally assigns a second access right to a user to be newly added, so that each user encompassed by the second authorization hierarchy is assigned the second access right, and wherein the second authorization hierarchy, in addition to the second user, comprises at least one further user; - providing at least one further, third authorization hierarchy generated starting from a fourth user, wherein the third authorization hierarchy is successively generated in that, starting from the fourth user, the respective user added most recently to the third authorization hierarchy personally assigns a third access right to a user to be newly added, so that each user encompassed by the third authorization hierarchy is assigned the third access right, and wherein the third authorization hierarchy, in addition to the fourth user, comprises at least one further user; and - verifying access rights of a third user for access to one of the data objects, wherein access to the data object is only granted when the third user is encompassed both by the first authorization hierarchy, so that he or she is assigned the first access right, and by the second authorization hierarchy, so that he or she is furthermore assigned the second access right, wherein the verification of the access rights of the third user for access to the data object furthermore comprises verifying at least the further third authorization hierarchy, and access to the data object is only granted when the third user is furthermore encompassed by the third authorization hierarchy so that he or she is assigned the third access right.