How to update another users collection data from front-end

I’m a newbie. But I’m trying to join dots - pardon me if I sound like an idiot.

The front end talking to a backend - that’s a security connection. As must it should be.

All users have ‘default’ access to backend in some form - unless they’ve not been given any priviledges - like site visitors.

For anyone to make changes to anyone else - heirarchy will need to be followed.

Can I know what specifically should the users change ? What data values are you wanting to change ?

I’ve been wanting to change the createOrder() and the parameters it takes - but I’m unable to punch an order using a spreadsheet - and that’s what led me to this question here.

I am suspecting user data cannot be modified via Velo. It will require access to the DB.