We have a company live SQL DB, it's written almost constantly and contains very sensitive information.
The SQL admin in here lets users run live queries against the live DB. The run them from both Crystal reports and
the SSMS from their local machines. IS this safe to do. Are there any negatives?
We do have replication setup to another SQL server so is it better to run all queries against that?