Abstract: A secured academic ERP system comprises an ERP database storing data for an academic institution, an application server for authenticating users and generating requests to access the ERP database for the users, a security system that accesses a user permissions table that maps the users to permitted organizations within an academic institution and modifying the requests to limit the requests to the permitted organizations for the users making the requests, and a datasource for receiving the modified requests and passing those requests to the ERP database. This system extends security beyond the traditional role-based data security model to support the finer granularity security at the level of the content.