In this paper is presented a new access control method called document-based access control (DuControl).DuControl extends traditional access control methods in order to manage the document contents; it is done by means of a rules set that allows easy administration of the access policies, resources and users.