Controlling user access to your partners' data