We have 2 connections lets call them DB1 and DB2
User1 has permissions to DB1, and user2 permissions to DB2.
We observe that if DB2 user saves a table query to a collections area which DB1 has view to, then DB1 can view all the data within that table report, even though they dont have actual access to that DB.
Other than not having collections with shared DB connections any way to prevent this?