A method of controlling access to secured data, comprising: operatively coupling a repository to one or more databases which store secure data; storing, in a metamodel of the one or more databases, security information that qualifies which data objects are accessible by certain user roles; employing the repository: intercepting a user query of one of the databases; automatically determining from the intercepted query, a user who generated the user query and a user role assigned to the user; parsing the intercepted query and identifying objects in the database that are to be accessed as part of the user query; looking up security information of the identified objects in the metamodel and to determine which identified objects to filter out of the user query; based on the determined user role and the identified objects to be filtered out of the user query, automatically modifying the user query to filter out secure data for which the user does not have access rights; and applying the modified query to the respective database; using the repository to also secure the security information in a database model, and enabling the security information in the database model to be dynamically adjustable at runtime, characterised by: the automatically modifying the user query comprising: building an expression tree to filter out the secure data for which the user does not have access rights, and appending the expression tree built to a conditional part of the intercepted query, wherein the expression tree comprises a plurality of expressions based on a scope of the identified objects and a task associated with the user role. operatively coupling a repository to one or more databases which store secure data; storing, in a metamodel of the one or more databases, security information that qualifies which data objects are accessible by certain user roles; employing the repository: intercepting a user query of one of the databases; automatically determining from the intercepted query, a user who generated the user query and a user role assigned to the user; parsing the intercepted query and identifying objects in the database that are to be accessed as part of the user query; looking up security information of the identified objects in the metamodel and to determine which identified objects to filter out of the user query; based on the determined user role and the identified objects to be filtered out of the user query, automatically modifying the user query to filter out secure data for which the user does not have access rights; and applying the modified query to the respective database; intercepting a user query of one of the databases; automatically determining from the intercepted query, a user who generated the user query and a user role assigned to the user; parsing the intercepted query and identifying objects in the database that are to be accessed as part of the user query; looking up security information of the identified objects in the metamodel and to determine which identified objects to filter out of the user query; based on the determined user role and the identified objects to be filtered out of the user query, automatically modifying the user query to filter out secure data for which the user does not have access rights; and applying the modified query to the respective database; using the repository to also secure the security information in a database model, and enabling the security information in the database model to be dynamically adjustable at runtime, characterised by: the automatically modifying the user query comprising: building an expression tree to filter out the secure data for which the user does not have access rights, and appending the expression tree built to a conditional part of the intercepted query, wherein the expression tree comprises a plurality of expressions based on a scope of the identified objects and a task associated with the user role. building an expression tree to filter out the secure data for which the user does not have access rights, and appending the expression tree built to a conditional part of the intercepted query, wherein the expression tree comprises a plurality of expressions based on a scope of the identified objects and a task associated with the user role.