Unauthorized Database Queries in Orchestrator