Techniques are provided for implementing and using a hierarchy-based
secured document repository. The invention, the repository allows each
user access to documents based on the position(s) held by the user in the
hierarchy of a company. In one embodiment, the repository includes data
that reflects the hierarchy of a company ("hierarchy data"), where the
hierarchy includes nodes and relationships between nodes. The repository
also includes user-to-node mapping data that maps users to one or more
nodes, and document-to-node mapping data that maps documents to nodes. An
access mechanism is provided that determines which document a user is
able to access based on the hierarchy data, the user-to-node mapping
data, and the document-to-node mapping data. In one embodiment, a user is
allowed to access only those documents that are (1) mapped to the same
node as the user, or (2) mapped to nodes that are below (relative to the
hierarchy) any of the nodes to which the user is mapped.