Controlling access to master data