CONTROLLING ACCESS TO DATA IN A CLOUD-BASED SOFTWARE PLATFORM BASED ON DATA SCHEMAS

1 . A method for providing access to data in a cloud-based software platform, the method comprising:

generating, by a first cloud-based software application connected to a user account and running on the cloud-based software platform, first data associated with the user account, the first data being structured in accordance with a first data schema;

storing the first data in a cloud data store in association with the user account; and

accessing the first data associated with the user account by a second cloud-based software application connected to the user account and running on the cloud-based software platform, subject to access permissions specified by the first data schema.

2 . The method of claim 1 , wherein the accessing the first data associated with the user account comprises:

identifying data objects stored in the cloud data store in association with the user account and consistent with the first data schema, the data objects comprising the first data; and

retrieving the data objects consistent with the first data schema.

3 . The method of claim 2 , wherein the data objects stored in the cloud data store in association with the user account further comprise:

second data structured in accordance with the first data schema and generated by a third cloud-based software application connected to the user account and running on the cloud-based software platform.

4 . The method of claim 1 , wherein the first data stored in the cloud data store in association with the user account is inaccessible to a second instance of the second cloud-based software application connected to a second user account different from the user account.

5 . The method of claim 1 , wherein the first data schema is published in a repository comprising a plurality of data schemas accessible to cloud-based applications running on the cloud-based software platform.

6 . The method of claim 1 , further comprising:

generating, by a third cloud-based software application connected to the user account and running on the cloud-based software platform, second data associated with the user account, the second data being structured in accordance with a second data schema different from the first data schema; and

storing the second data in the cloud data store in association with the user account.

7 . The method of claim 6 , further comprising:

accessing the second data associated with the user account by a fourth cloud-based software application connected to the user account and running on the cloud-based software platform, subject to access permissions specified by the second data schema.

8 . A cloud-based software platform comprising:

a processor; and

a memory storing instructions that, when executed by the processor, cause the processor to:

store first data generated by a first cloud-based software application connected to a user account and running on the cloud-based software platform in a cloud data store associated with the user account, the first data being structured in accordance with a first data schema; and

access the first data associated with the user account by a second cloud-based software application connected to the user account and running on the cloud-based software platform, subject to access permissions specified by the first data schema.

9 . The cloud-based software platform of claim 8 , wherein the instructions to access the first data associated with the user account comprise instructions that, when executed by the processor, cause the processor to:

identify data objects stored in the cloud data store in association with the user account and consistent with the first data schema, the data objects comprising the first data; and

retrieve the data objects consistent with the first data schema.

10 . The cloud-based software platform of claim 9 , wherein the data objects stored in the cloud data store in association with the user account further comprise:

second data structured in accordance with the first data schema and generated by a third cloud-based software application connected to the user account and running on the cloud-based software platform.

11 . The cloud-based software platform of claim 8 , wherein the first data stored in the cloud data store in association with the user account is inaccessible to a second instance of the second cloud-based software application connected to a second user account different from the user account.

12 . The cloud-based software platform of claim 8 , wherein the first data schema is published in a repository comprising a plurality of data schemas accessible to cloud-based applications running on the cloud-based software platform.

13 . The cloud-based software platform of claim 8 , wherein the memory further stores instructions that, when executed by the processor, cause the processor to:

store second data generated by a third cloud-based software application connected to the user account and running on the cloud-based software platform, the second data being structured in accordance with a second data schema different from the first data schema.

14 . The cloud-based software platform of claim 13 , wherein the memory further stores instructions that, when executed by the processor, cause the processor to:

access the second data associated with the user account by a fourth cloud-based software application connected to the user account and running on the cloud-based software platform, subject to access permissions specified by the second data schema.

15 . A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to:

store first data generated by a first cloud-based software application connected to a user account and running on a cloud-based software platform in a cloud data store associated with the user account, the first data being structured in accordance with a first data schema; and

access the first data associated with the user account by a second cloud-based software application connected to the user account and running on the cloud-based software platform, subject to access permissions specified by the first data schema.

16 . The non-transitory computer-readable medium of claim 15 , wherein the instructions to access the first data associated with the user account comprise instructions that, when executed by the processor, cause the processor to:

identify data objects stored in the cloud data store in association with the user account and consistent with the first data schema, the data objects comprising the first data; and

retrieve the data objects consistent with the first data schema.

17 . The non-transitory computer-readable medium of claim 16 , wherein the data objects stored in the cloud data store in association with the user account further comprise:

second data structured in accordance with the first data schema and generated by a third cloud-based software application connected to the user account and running on the cloud-based software platform.

18 . The non-transitory computer-readable medium of claim 15 , wherein the first data stored in the cloud data store in association with the user account is inaccessible to a second instance of the second cloud-based software application connected to a second user account different from the user account.

19 . The non-transitory computer-readable medium of claim 15 , wherein the first data schema is published in a repository comprising a plurality of data schemas accessible to cloud-based applications running on the cloud-based software platform.

20 . The non-transitory computer-readable medium of claim 15 , further storing instructions that, when executed by the processor, cause the processor to:

store second data generated by a third cloud-based software application connected to the user account and running on the cloud-based software platform, the second data being structured in accordance with a second data schema different from the first data schema.