The owner of an application (program) produces an access control data bank in which, based on the identities of the other users as well as the type of request that is sent by the users, he can determine as to his own application whether the request of the respective user should be allowed or whether the request should be denied.