Patent ID: 8977647
Filing Date: 2015-03-10
Classification: G06F,H04L,H04W

Abstract:
1. A non-transitory machine-readable medium carrying one or more sequences of instructions which, when executed by one or more processors, cause the one or more processors to carry out the steps of: presenting a user with an interface which describes permissions that are required for an application created by a first entity of an on-demand database service; permitting the user to authorize the application based on the required permissions; after permitting the user to authorize the application, receiving by the on-demand database service a request from the application, the request including a request to access data of the user associated with a database of the on-demand database service, wherein the first entity and the user are different users of the on-demand database service, and the on-demand database service stores data on behalf of each of the users in a logically separated manner such that, without authorization, data of one user is inaccessible to another user; determining by the on-demand database service whether the application is authorized to access the data of the user associated with the database of the on-demand database service using a plurality of data access limitations associated with the application and indicated in a profile, wherein the data access limitations associated with the application are included with the application in a package, and the package is installed by the user; conditionally allowing the access to the data of the user associated with the database of the on-demand database service, based on the determination; receiving an update associated with the application; and after receiving the update, presenting the update to the user for acceptance by the user; wherein when the package is uninstalled, the profile indicating the plurality of data access limitations is also uninstalled.