Abstract: A method and apparatus for implementing a software security system in a customer computer system. The method includes requesting permission to display a security-controlled file or application feature when a user attempts to access the security-controlled file or application feature, determining a type of data in the security-controlled file or associated with the security-controlled application feature from at least two types of data, the at least two types of data changing dynamically, and determining whether the user has access to the type of data and providing access to the security-controlled file or application feature if the user has permission to access the type of data. The apparatus for the software security system includes a security repository module, an access security module, and a dynamic security module.