Is there any possibility that a user can write to the database without write permission? if such like bug reported, how administrator can identify this issue and how to rollback