Watch this video on YouTube
How does the risk level change when users have direct access to a database at the system level?