Abstract: A system for securing information accessible using a plurality of software applications includes a computer readable storage medium and computer software stored on the computer readable storage medium. The computer software may receive a request from a user to process information using one of a plurality of software applications and may retrieve user information associated with the user. The computer software may determine whether the user has authority to process the information as requested according to the retrieved user information and one or more rules defined using XACML. The computer software may allow the user to process the information using the software application in response to determining that the user has authority to process the information as requested and may prevent the user from processing the information using the software application in response to determining that the user does not have authority to process the information as requested.