1. A non-transitory computer readable medium comprising computer readable program code embodied therein for causing a computer system to perform a method, the method comprising: receiving an application; receiving application information for the application; executing, for a reviewer, the application directly in a reviewer portal on the computer system, the reviewer portal accessible to the reviewer via a uniform resource locator; determining an access privilege for the application based, in part, on the application information and the reviewer, wherein the access privilege restricts execution of the application to a sandbox when the access privilege specifies sandbox-only execution, wherein the access privilege permits limited access to resources outside the sandbox when the access privilege specifies limited access execution, and wherein the sandbox is an isolated execution environment within a runtime environment; setting a digital rights management (DRM) setting for the application specifying that the application may be copied to multiple client devices; generating a first deployment package for the application using the application, the DRM setting, and the access privilege, and based on a first client device type; generating a second deployment package for the application using the application, the DRM setting, and the access privilege, and based on a second client device type: publishing the application to a warehouse; receiving a first request for the application from a first client device having the first client device type and associated with a user account at the warehouse, wherein the user account is associated with a purchased copy of the application; providing the first deployment package to the first client device, wherein the first client device executes the first deployment package within the sandbox using the runtime environment on the first client device; receiving a second request for the application from a second client device having the second client device type and associated with the user account; and providing, without requiring a purchase of another copy of the application, the second deployment package to the second client device, wherein the second client device executes the second deployment package within the sandbox using the runtime environment on the second client device.