An application's access to storage is limited on a per application basis. The application is granted access to a portion of the storage. The application may manipulate that portion of the storage by creating distinct file structures within that portion, modifying, reading and writing files contained therein. The application is denied access to the storage area outside the granted portion. Similarly, other applications stored in the storage area follow a similar paradigm. In one embodiment, the storage area is a hierarchical file structure and applications are stored as children in the file structure. The applications, however, are mapped to indicate each are stored at the root of the file structure to prevent access to other areas of the file structure. In another embodiment, the file structure supports a shared directory that multiple applications are mapped to, also as a root directory but to another drive.