As business documents are shared among users in enterprises, finding the documents that fit the users’ need from disparate data sources under access control policies of enterprises is a challenging task. In this paper, we present a novel secure-index search technique that provides an effective search of business documents with document-level access control. The effective and secure search is realized by incorporating metadata identifying document types, keyword definitions and access control information directly into a search index. Given a search query of an authorized user, a technique that generates SQL statements on the search index to compute the answer for the search query under user’s access privilege is also proposed.