Patent ID: 8140576

Claim:
A method, comprising: receiving a request from an application created by a first entity of an on-demand database service, the request including a request to access data of a second entity stored in a database of the on-demand database service; determining, utilizing a hardware processor, whether the application is authorized to access the data of the second entity stored in the database of the on-demand database service using a plurality of data access limitations associated with the application and indicated in a profile; conditionally allowing the access to the data of the second entity stored in the database of the on-demand database service, based on the determination; receiving an update associated with the application; and presenting the update to the second entity for acceptance by the second entity, and conditionally allowing the access to the data of the second entity stored in the database of the on-demand database service utilizing the update, based on the acceptance; wherein the profile indicating the data access limitations associated with the application is defined for a package including the data; wherein the data access limitations grant the application created by the first entity access to the data of the second entity; wherein the first entity and the second entity are different subscribers to the on-demand database service, such that the on-demand database service processes requests for each of the first entity and the second entity and stores information for each of the first entity and the second entity, and wherein the profile indicating the data access limitations granting the application created by the first entity access to the data of the second entity provides sharing with the first entity the data of the second entity that is stored in the database of the on-demand database service; wherein the data access limitations are included with the application in the package; wherein the package is installed by the second entity.