Patent ID: 9697377
Date: 2017-07-04
CPC Classifications: G06F,H04L,H04W

Claim:
1. A method, comprising: responsive to determining that first entity that is a user of a database service is authorized to obtain a package that includes an application of a second entity, a computer system installing the package; extracting, by the computer system, one or more profiles from the package, wherein a first profile of the one or more profiles specifies a plurality of limitations on the application's access to data of the first entity within the database service, including actions that may be performed on the data by the application; responsive to an acceptance of the plurality of limitations of the first profile by the first entity, the computer system permitting the application to access data of the first entity within the database service according to the plurality of limitations of the first profile; receiving, at the computer system, an upgrade to the package, wherein the upgrade pertains to the application and includes a modification to the first profile that includes a different set of limitations indicating an updated level of access to data of the first entity, including removal of a subset of the plurality of limitations; and responsive to an acceptance of the upgrade, the computer system permitting the application to access data of the first entity within the database service according to the modified first profile.