Any path the shell could write is editable: relative paths resolve from the workspace, `~` and `~/…` mean your home directory, and `~user` is refused — spell another user's path absolutely instead. Two places stay closed to edits: the registered project workspaces, where the work belongs to that project's manager, and the product's own live databases and the copies it keeps of them, under its data directory. Every other database — yours, another product's, a dump — is an ordinary file.