Are there any obvious security risks to providing a none IT Staff member read-only Database access (through MySQL Workbench) to a Wordpress Database, if this is behind a firewall/VPN?
3
-
3The risk is that someone gets read access to all that data. The question is, what's the risk if that access is abused? We cannot answer that for you/– schroeder ♦Apr 3, 2019 at 18:11
-
Does the staff member have a legitimate business need to access this data? Why does its location behind a firewall matter? Isn't it already behind a firewall?– schroeder ♦Apr 3, 2019 at 18:28
-
I removed the line about how you plan to communicate the password because it has nothing to do with your question, and you yourself identified that as a bad idea.– schroeder ♦Apr 3, 2019 at 18:28
Add a comment
|
1 Answer
As per your Question, No one can give Yes, No Answer. Because Risk is not a hacking. Security is not a providing technical security with firewall or any security devices.
Risk is a situation involving exposure to danger.
You have to understand what is a requirement of users. And according to that you need to provide only appropriate access to users. Because if you have classified data, which has permission level.
If you give access to users, you need to make sure that they can access only data which related to their permission level. Otherwise users will gain all secret information from your database without having any technical attack.
That will be a big risk ever you face.
