Running two separate customers in a single partition with complete isolation

Hi,

The obvious answer to this would be to use Logical Partitioning and two
partitions but does anyone know of a tool that can effectively secure a
single partition so that two customers could operate on the same partition
completely independently?

I know that I can use in built security to secure libraries, IFS, output
queues etc...but this will require manual setup and maintenance.

Why would I want to do this? my company is looking to provide a hosted
solution and since most of the cost with a hosting provider is the charge
for managing an IBM i partition then to make it more attractive to our
customers I've been asked whether a tool is available to easily allow us to
securely run multiple customers on a single partition.

The software product uses a combination of web (via in built HTTP server)
and traditional 5250 emulation. All of the admin work a customer would
undertake, e.g. creating users, would be via 5250 emulation. We believe we
can modify our software to cater for this scenario but it will be a lengthy
exercise and couldn't be resourced until way in the future.

I have already stated that I believe such a tool will not exist but I'm
having to investigate to make sure.

Anyone know of such a tool?

Thanks