The developer claims that he assumed that he assumed that the database credentials were specific to the customer he was helping debug the problem. Once he reali

The developer claims that he assumed that he assumed that the database credentials were specific to the customer he was helping debug the problem. Once he realized that he could see other data, he closed the connection and notified the company. I'd argue that a customer who accesses their own data on a vendor's database via a client has also the right to access it via a different client.