In this presentation Ralf Dietrich and Andreas Wolter will assume the role of the DBA/DBDev and an external consultant. Playing through different scenarios, the external consultant will resort to all kinds of tricks to access data in a supposedly properly arranged database environment, which was actually not intended by the DBA/DBDev. Of course, he will then have the chance to fix this gap. The match is repeated on different levels with different scenarios until a desirable condition is reached. This session holds in store surprising insights even for experienced administrators, covering topics from schema ownership implication to best practices for user-permissions, while administrators may still allow the external consultants to do all necessary work.