A method for providing network-based permissioning for a data resource platform comprising: generating a first security node hash identifier by performing a first hash operation on at least a first data resource identifier associated with a first data resource, being a first data set, produced by the data resource platform, the first data set comprising multiple first transactions (218a, 218b); associating the first security node hash identifier with a first security policy; storing a link between a unique identifier of each of the multiple first transactions (218a, 218b) of the first data set and the first security node hash identifier; storing a link between the first security node hash identifier and the first security policy; generating a dependent second security node hash identifier by performing a second hash operation on a second data resource identifier associated with a dependent second data resource, being a second data set, and on at least the generated first security node hash identifier, the dependent second data set being produced by the data resource platform using at least the multiple first transactions (218a, 218b) of the first data set as at least one parent data resource, the dependent second data set comprising multiple second transactions (218c, 218d) based on the first data set;; associating the dependent second security node hash identifier with a second security policy; storing a link between a unique identifier of each of the multiple second transactions (218c, 218d) of the dependent second data set and the dependent second security node hash identifier; and storing a link between the dependent second security node hash identifier and the second security policy and wherein the second security policy comprises the first security policy; receiving (306, 508) an access request for requesting permission to access the dependent second data set, wherein the access request comprises either a security node hash identifier or a transaction identifier; in response to the access request, finding a corresponding dependent second security node hash identifier that matches the security node hash identifier comprised in the access request or which is stored linked to the transaction identifier comprised in the access request, responsive to finding a corresponding dependent second security node hash identifier, determining a security policy stored linked to the corresponding dependent second security node hash identifier and granting permission (308, 510) based at least in part on the security policy, or responsive to finding no corresponding dependent second security node hash identifier, denying permission, wherein the method is performed by one or more processors. generating a first security node hash identifier by performing a first hash operation on at least a first data resource identifier associated with a first data resource, being a first data set, produced by the data resource platform, the first data set comprising multiple first transactions (218a, 218b); associating the first security node hash identifier with a first security policy; storing a link between a unique identifier of each of the multiple first transactions (218a, 218b) of the first data set and the first security node hash identifier; storing a link between the first security node hash identifier and the first security policy; generating a dependent second security node hash identifier by performing a second hash operation on a second data resource identifier associated with a dependent second data resource, being a second data set, and on at least the generated first security node hash identifier, the dependent second data set being produced by the data resource platform using at least the multiple first transactions (218a, 218b) of the first data set as at least one parent data resource, the dependent second data set comprising multiple second transactions (218c, 218d) based on the first data set;; associating the dependent second security node hash identifier with a second security policy; storing a link between a unique identifier of each of the multiple second transactions (218c, 218d) of the dependent second data set and the dependent second security node hash identifier; and storing a link between the dependent second security node hash identifier and the second security policy and wherein the second security policy comprises the first security policy; receiving (306, 508) an access request for requesting permission to access the dependent second data set, wherein the access request comprises either a security node hash identifier or a transaction identifier; in response to the access request, finding a corresponding dependent second security node hash identifier that matches the security node hash identifier comprised in the access request or which is stored linked to the transaction identifier comprised in the access request, responsive to finding a corresponding dependent second security node hash identifier, determining a security policy stored linked to the corresponding dependent second security node hash identifier and granting permission (308, 510) based at least in part on the security policy, or responsive to finding no corresponding dependent second security node hash identifier, denying permission, wherein the method is performed by one or more processors.