You have implemented a database application that uses a SQL Server database. The application has the following characteristics:

* The application uses LINQ to SQL to generate commands to retrieve data.
* The application uses LINQ to SQL to call configured stored procedures to update data.

The application uses Windows Authentication to connect to the database.
Your data administrator grants the following SQL Server permissions:

* All users are given permissions to read and write to tables used by the application.
* All users are given permission to execute stored procedures used by the application.

You need to identify violations of the principle of least privilege.
Which practice do you identify?