Re: Two problems....
It's a meta database and the data wasn't exposed out of the database to other customers only essentially within the same customers org. So if they had set up their internal permissions to stop specific users from seeing specific data in the org this was suddenly visible to the internal user.