>The team first reverse-engineered our backup script to delete all of our offsite backups. I guess the permission should be one way. The production server can

>The team first reverse-engineered our backup script to delete all of our offsite backups. I guess the permission should be one way. The production server can only push data to backup server, never to delete or overwrite anything even if it wanted to.