According to one aspect of the present invention, a method is provided in which a search request containing search criteria is received from a first user. A search is performed based upon the search criteria and the first user's organizational identifier to identify data records that match the search criteria and to which the first user is allowed to access based upon the first user's organizational identifier. In another embodiment, a search is performed based upon the search criteria and a list of categories to which the first user is authorized to access to identify records that match the search criteria and to which the first user is allowed to access based upon the list of categories.