A method for access control to computer-controlled programs, which can be used at the same time by a plurality of users. A user sends a request regarding a program to a unit for organizing a data flow. It is checked in this unit whether the user which sent the request, has originally started the program. When the user sending the request has started the program, the request is forwarded to the program. If not, an access control with respect to the request is carried out on the basis of an access control data bank. When it derives from the access control that the request is an allowed request, the request is forwarded to the program. When it derives from the access control that the request represents an unallowed request, the request is not forwarded to the program.