dhtmlxConnector is open to external access of another programs and any external user is allowed to change data in database.
Thus, adding some kind of session-based authentication is strongly recommended.
Built-in security manager allows to limit connector for certain operations.
$gridConn->access->deny("read"); //blocks Select action $gridConn->access->deny("insert"); //blocks Insert action $gridConn->access->deny("update"); //blocks Update action $gridConn->access->deny("delete"); //blocks Delete action
By default, connector allows all operations.