Greetings, community! Have a question regarding app security.
I have a scenario where it is required that users connect to a SQL DB via a service user account, which means an app uses an implicit SQL connection with SQL authentication. Now, I know there are warnings around the use of implicit connections because users can normally create a new app/flow using the connection and gain uncontrolled access to the DB.
My question is: does that danger exist if the user is only a Basic User in an environment? I did some testing with an account that only used the Basic User role, and I found that the user was prevented from creating apps or flows that used that connection.
Are there still security risks, or is this a safeguard?
