Every Database.com org is locked down tightly when you first provision it. This paper explains how to use various Database.com features such as users, profiles, roles, groups, and sharing rules to progressively open up access so that just the right application users have access to just the right data at just the right time.