1. A method of providing access to data objects in a database system, comprising: receiving a request to access data objects stored by the database system; generating a set of data objects in response to the request; for each data object in the set of data objects: determining whether a requesting entity has read-access privileges to the data object; if the requesting entity does not have read-access privileges to the data object, generating a cloaked version of the data object and providing the requesting entity access to only the cloaked version of the data object, wherein the cloaked version of the data object identifies a set of relationships between the cloaked data object and other data objects managed by the database system without exposing a data content of the data object; and if the requesting entity has read-access privileges to the data object, providing the client application access to the data object.