It is good practice to check your list of users, and what access they have to the system. There is a 'Users' report under Group Reports which shows details.