# Can anyone write to the database if no privacy rules are in place?

**URL:** <https://forum.bubble.io/t/can-anyone-write-to-the-database-if-no-privacy-rules-are-in-place/8181>\
**Category:** Database\
**Created:** [November 24, 2016, 12:25pm UTC](https://forum.bubble.io/t/can-anyone-write-to-the-database-if-no-privacy-rules-are-in-place/8181 "2016-11-24T12:25:27Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![moviecud](https://avatars.discourse-cdn.com/v4/letter/m/a587f6/32.png) [@moviecud](https://forum.bubble.io/u/moviecud)\
**Post date:** [November 24, 2016, 12:25pm UTC](https://forum.bubble.io/t/can-anyone-write-to-the-database-if-no-privacy-rules-are-in-place/8181/1 "2016-11-24T12:25:27Z")

</div>

For my app, if I did not set any privacy rules for the database, I understand that “everyone else (default permissions)” can read the database, even if a page does not explicitly load or show a specific data field.

Is it view-only for the public, or can sophisticated coders also figure a way to write or make changes to the database if there are no privacy rules?

Also, in my app can I make a workflow such that User A is making changes to User B’s data fields (for the default in-built User type)?

Thanks in advance.