Any path the shell could write is editable: relative paths resolve from the workspace, `~` and `~/…` mean your home directory, and `~user` is refused — spell another user's path absolutely instead. Two places stay closed to edits: the managed workspaces, where the work belongs to their managers, and the product's own live databases and the copies it keeps of them, under its data directory. Every other database — yours, another product's, a dump — is an ordinary file.