Security view-based, external enforcement of business application security rules

A method, system and computer program are useful for enforcement of business application security rules in connection with applications external to the business application. To support secured access to data stored in a database system managed by a business application, a rule directed from the business application to a database system specifying security criteria for access to the data is received. A database view to select a subset of the data in accordance with the security criteria is then created, and a representation of the database view is stored in the database system to support the secured access to the subset of the data in connection with a query from the application external to the business application. When the query is then received, the user is identified along with a specification of the database view to return the subset of the data authorized by the security criteria for that user.