1. A method, comprising: responsive to determining that an operation is being attempted on an object, determining whether the object corresponds to a software partition; responsive to determining that the object corresponds to a software partition, determining a partition identifier associated with the object, the partition identifier indicating one or more software partitions corresponding to the object; determining a domain identifier associated with a user attempting the operation; accessing domain isolation rules indicating rules for allowing or disallowing operations to proceed on the partition based on partition identifiers and domain identifiers; determining whether the operation can proceed on the partition based on the domain isolation rules by determining whether the domain identifier associated with the user is a permitted domain for the partition identifier corresponding to the object; and responsive to determining that the operation on the partition can proceed based on the domain isolation rules by determining that the domain identifier a permitted domain for the partition identifier, permitting the operation.