Controlling User Access to Your Partners' Data