Asfar as user information, I don't see anything listed to help prevent access there?

What do you mean by this?

We used to oly allow access through views, which joined each row...