1

Are there any obvious security risks to providing a none IT Staff member read-only Database access (through MySQL Workbench) to a Wordpress Database, if this is behind a firewall/VPN?

  • 3
    The risk is that someone gets read access to all that data. The question is, what's the risk if that access is abused? We cannot answer that for you/ – schroeder Apr 3 at 18:11
  • Does the staff member have a legitimate business need to access this data? Why does its location behind a firewall matter? Isn't it already behind a firewall? – schroeder Apr 3 at 18:28
  • I removed the line about how you plan to communicate the password because it has nothing to do with your question, and you yourself identified that as a bad idea. – schroeder Apr 3 at 18:28
2

As per your Question, No one can give Yes, No Answer. Because Risk is not a hacking. Security is not a providing technical security with firewall or any security devices.

Risk is a situation involving exposure to danger.

You have to understand what is a requirement of users. And according to that you need to provide only appropriate access to users. Because if you have classified data, which has permission level.

If you give access to users, you need to make sure that they can access only data which related to their permission level. Otherwise users will gain all secret information from your database without having any technical attack.

That will be a big risk ever you face.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.