A system that facilitates database security and management, the system including: a relational database adapted for storing a plurality of objects having a hierarchical relationship between the objects, those objects comprising a root object, container children objects, and non-container children objects; and a region component associated to the relational database adapted to establish a security descriptor tree, said SD tree comprising SD regions for the root object, the container objects, and the non-container objects, and adapted for transforming security policy mapping from an inheritance hierarchy to a security domain of objects where security zones of objects share a similar security policy, said region component adapted for defining by means of said SD regions one or more security zones for a subset of the objects, wherein each security zone thus has an associated security descriptor, the SD regions being independent of the hierarchical relationships between the objects, and wherein the region component is further adapted to assign one of the one or more SD regions to each of the plurality of objects such that objects are grouped based on the SD region to which the objects are assigned, thereby enabling changing an object's security descriptor by modifying the SD region to which the object is assigned; and adapted to create a first new SD region for an object, if the security descriptor of said object is updated and to create a second new SD region assigned to the container children of said updated object and a third new SD region assigned to the non-container children of that updated object. a relational database adapted for storing a plurality of objects having a hierarchical relationship between the objects, those objects comprising a root object, container children objects, and non-container children objects; and a region component associated to the relational database adapted to establish a security descriptor tree, said SD tree comprising SD regions for the root object, the container objects, and the non-container objects, and adapted for transforming security policy mapping from an inheritance hierarchy to a security domain of objects where security zones of objects share a similar security policy, said region component adapted for defining by means of said SD regions one or more security zones for a subset of the objects, wherein each security zone thus has an associated security descriptor, the SD regions being independent of the hierarchical relationships between the objects, and wherein the region component is further adapted to assign one of the one or more SD regions to each of the plurality of objects such that objects are grouped based on the SD region to which the objects are assigned, thereby enabling changing an object's security descriptor by modifying the SD region to which the object is assigned; and adapted to create a first new SD region for an object, if the security descriptor of said object is updated and to create a second new SD region assigned to the container children of said updated object and a third new SD region assigned to the non-container children of that updated object. said region component adapted for defining by means of said SD regions one or more security zones for a subset of the objects, wherein each security zone thus has an associated security descriptor, the SD regions being independent of the hierarchical relationships between the objects, and wherein the region component is further adapted to assign one of the one or more SD regions to each of the plurality of objects such that objects are grouped based on the SD region to which the objects are assigned, thereby enabling changing an object's security descriptor by modifying the SD region to which the object is assigned; and adapted to create a first new SD region for an object, if the security descriptor of said object is updated and to create a second new SD region assigned to the container children of said updated object and a third new SD region assigned to the non-container children of that updated object.