Abstract: The invention provides a dynamic rules-based secure data access system that may be used in a variety of applications that include a requirement for controlled secure access to a database. The rules-based access system has several features. One of these is that each user be assigned a role, either as an individual or as part of the group. Access rights may be assigned based on roles, but these can be modified within the system by individual users, that have authority to do so. Further, the data resources that each user is allowed to access, based on his or her role, and the extent of viewing and of data manipulation allowed, is further controlled based on assigned “rights and privileges”.