A method and computing system for controlling access by a user to a computing resource located in respective source and destination domains in a hierarchy of domains. The method comprises establishing a path of domains in the hierarchy from the source domain to the destination domain, specifying for at least one domain in the path preceding the destination domain whether traversal to a successive domain in the path is permitted, and providing to the user access to the computing resource if traversal from the source domain to the destination domain along the path is permitted.