Not sure if this is the right place for this question (Perhaps SuperUser), but I'm sure there are some Access gurus here on ServerFault.
Anyway, we support some legacy MS Access apps and recently a user was able to change some information in our database. NOT GOOD! It should be read only.
MS Access is using a Trusted Connection and the user is part of a Windows Group in SQL Server that is only a DB Reader.
Is there a list of Gotchas when implementing Windows Users on SQL Server that we've missed?
The only clue that we had is that we only allow connections on a non-standard port.